Core Security Patterns: Best Practices and Strategies for J2EE™, Web Services, and Identity Management

Chapter 12. Securing the Identity–Design Strategies and Best Practices

Topics in This Chapter

• Identity Management Security Patterns

• Best Practices and Pitfalls

In Chapter 7, “Identity Management Standards and Technologies,” we introduced the identity management and the relevant security standards, such as SAML, Liberty, and XACML. SAML is an XML protocol for representing authentication and authorization assertions and is used for single sign-on and global logout. Liberty reuses the security assertion framework from SAML and extends it with different identity profiles and framework. XACML provides a versatile policy management framework for administering access control rules and managing security policies. These security standards are important because ...