Securing the Perimeter: Deploying Identity and Access Management with Free Open Source Software

© Michael Schwartz, Maciej Machulak 2018

Michael Schwartz and Maciej MachulakSecuring the Perimeterhttps://doi.org/10.1007/978-1-4842-2601-8_10

10. Multiparty Federation

Michael Schwartz¹  and Maciej Machulak²

(1)

Austin, TX, USA

(2)

London, UK

 

“Information security is a fundamentally cooperative endeavor, one in which responsibility and authority are distributed across a wide array of actors.”

—Ashwin J. Mathew¹

Federated identity protocols like SAML and OpenID Connect enable us to authenticate people in other domains, but trust issues quickly surface. For example, if your organization operates a website with valuable content and someone you authenticated at another domain steals the content, what recourse do you have? If your organization operates ...