Note: this blog is a mirror of my HP Labs Blog, on the same topic, accessible at: http://h30507.www3.hp.com/t5/Research-on-Security-and/bg-p/163

Monday, July 23, 2007

Liberty Alliance and Concordia Program

Recent post by Paul Madsen on his ConnectID blog, titled “Liberty Alliance – 50% less evil” (http://connectid.blogspot.com/2007/05/liberty-alliance-50-less-evil.html) was really amusing. Here is some further “evidence” showing that there is indeed some good willingness in being open and “collaborating” with other parties …
The “Concordia Program” (announced at RSA 2007) supported by Liberty Alliance (http://wiki.projectliberty.org/index.php/Concordia) “is designed as an umbrella initiative to drive harmonization and interoperability of identity specifications and protocols. The goal of this group is to help drive the development of use case scenarios where multiple identity specifications, standards and/or other initiatives might co-exist, recognizing heterogeneous deployment environments of the marketplace”.
I believe this is a first positive attempt/step to deal with the current “uncertainty” in the “federated identity management” and SSO space due to competing and not really compatible proposals (see Liberty Alliance, OpenID, InfoCard/CardSpace, etc.).
Progress in this direction now depends on the willingness of various solution providers, technology developers and technology adopters to collaborate and reconcile/armonise their different views (for the ultimate benefit of end-users and common people …).
Watch this space (and the Concordia wiki site …). There are soon going to be opportunities for discussions in workshops and meetings …

No comments: