Note: this blog is a mirror of my HP Labs Blog, on the same topic, accessible at: http://h30507.www3.hp.com/t5/Research-on-Security-and/bg-p/163

Monday, July 23, 2007

On Identity Predictions: what about Liberty Alliance and OpenId?

I’ve found an interesting post about “Identity Predictions for 2007” (http://duckdown.blogspot.com/2007/04/identity-predictions-for-2007.html) in the “Enterprise Architecture: Thought Leadership” blog. A prediction is that: “The vast majority of enterprises will remain confused about user-centric approaches to identity and will stick to what they know best, building site-centric identity providers. This trend will occur for at least another five years...”.
What is your view on this? As a researcher I recognise the potentials and value of user-centric identity management approaches and the need to contribute with R&D activities in this space – along with exploring their implications for enterprises - but at the same time I see a lot of confusion and hype in this space.
For example, it is currently unclear how Liberty Alliance and OpenID are respectively positioning their approaches and solutions (in the user centric IdM space), with regards to single-sign-on, federation and user identifiers. An interesting presentation from Eve Maler (http://colab.cim3.net/file/work/Expedition_Workshop/2007-02-27_IdentityManagementExploration/Maler_SAML_Liberty_20070227.pdf) only provides some high-level hints.
These initiatives have (at least conceptually) many aspects in common. So far I’ve not found detailed comparative analysis and discussions about the future of these initiatives, discussions on their potential “convergence” and their plans to bring user-centric IdM in the enterprise space. I am quite sure there must be something out there …
Are you aware of any document/discussion/forum about the above aspects that could provide more insights?

No comments: