“Information security is a fundamentally cooperative endeavor, one in which responsibility and authority are distributed across a wide array of actors.”
—Ashwin J. Mathew1
Federated identity protocols like SAML and OpenID Connect enable us to authenticate people in other domains, but trust issues quickly surface. For example, if your organization operates a website with valuable content and someone you authenticated at another domain steals the content, what recourse do you have? If your organization operates ...
