A delegation framework for federated identity management

Identity federation is a powerful scheme that links accounts of users maintained distinctly by different business partners. The concept of network identity is a driver for accelerating automation of Web Services on the Internet for users on their behalf while protecting privacy of their personally identifiable information. Although users of Web Services essentially delegate some or all privileges to an entity to perform actions, current identity based systems do not take into sufficient consideration delegation between entities hosting Web Services from a viewpoint of identity and privacy. This paper introduces a delegation model for federated identity management systems and proposes a delegation framework to provide solutions for access control in the context of delegation. The framework has a function of transferring user’s privileges across the entities encoded in delegation assertion extending SAML (Security Assertion Markup Language). The framework enables users to manage the...

• Type: Conference
• Year: 2005
• Where: DIM
• Authors: Hidehito Gomi, Makoto Hatakeyama, Shigeru Hosono, Satoru Fujita
• Keywords: DIM 2005, Identity Federation, Information Management, Sufficient Consideration Delegation, Web Services