This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links
Identity Broker
Identity Broker

Version management

Difference between version and

At line 1 added 58 lines
!!! Overview
[{$pagename}] is a service that provides [Identity Correlation] and is a [Data aggregator]
[{$pagename}] is a generic industry term and not part of any [Standard]
!! [{$pagename}] [Single Sign-On] [2]
An [{$pagename}] is often part of a a [Single Sign-On] [Architecture] as an an intermediary service that connects multiple [Service Providers|SP] with different [Identity Provider (IDP)]s.
A [{$pagename}] or [Identity Correlation] service maps [Identity Attributes], including unique identifiers, across multiple [Identity Provider (IDP)] to the [Digital Subject].
Often a [{$pagename}] is incorporated within the [Identity Provider (IDP)] service.
As an intermediary service, the [{$pagename}] is responsible to create a [trust] relationship with [Identity Provider (IDP)]s in order to use the [Digital Identity]s to access services exposed by [Service Providers|SP].
From an user perspective, an [{$pagename}] provides an user-centric and centralized way to manage [Digital Identity]s across different [Security Domains] or realms, where an existing [Digital Identity]s can be linked with into one [Digital Subject] as a [Federated Identity] from different [Identity Provider (IDP)]s or even created based on the identity information obtained from the various [Digital Identity]s.
[{$pagename}] are usually [Security Token Service] providers that can translate [Tokens] between different identity [tokens] from one standard format to another or to the proprietary [session] [cookie] formats used by many [WAM] systems.
!! Standardized cross-app [Single Sign-On] Experience
Typically, An [Identity Provider (IDP)] is usually based on a specific [Authentication Method] and communicates [authentication] and [Authorization] information to the [SP]. The [{$pagename}] as an example, might utilize a [SPNEGO] to obtain a [Kerberos] Ticket and obtain information on the [Digital Identity] to be able to create a [SAML V2.0] [SAML Assertion] into a [SP] which uses [SAML V2.0] and transform the [SAML Assertion] into a [Access Token] for use within [OAuth 2.0] or [OpenID Connect].
Often various [Authentication Agents] would be installed on an [Identity Broker] machine allowing [Cross-platform Authentication].
Often the [{$pagename}] would:
* have multiple [Authentication Agents] allowing [Cross-platform Authentication].
* be a member of or have [Federation] into multiple [domains] to provide [Cross-domain authentication]
which would allow [Single Sign-On] ability for multiple platforms and domains.
The [Native Applications Working Group] is defining a profile of [OpenID Connect] (OIDC) that will enable a standardized cross-app [Single Sign-On] experience model for native mobile applications on both consumer-centric and enterprise applications.
!! [{$pagename}] in [Marketing] [3]
[{$pagename}] service is provided to provide [Marketing] [data] to their customers to be able to perform [Marketing] to [customers]. These [{$pagename}] [Services] build (hopefully) [De-anonymization] data sets which create [Anonymous] data on marketing.
[Acxiom Corporation], [Google], [Facebook] are a few of the many [Internet] or [Database] [Marketing] [Organizations|Organizational Entity] that provide these type of services.
!! [Privacy Considerations]
Needles to say [{$pagename}] have [Privacy Considerations]
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
----
* [#1] - [Chapter 9. Identity Broker|http://docs.jboss.org/keycloak/docs/1.2.0.Beta1/userguide/html/identity-broker.html|target='_blank'] - loosely based on data observed:2015-06-03
* [#2] - [Identity Broker: An SSO Protocol Transition From OpenID Connect To WS-Federation|https://medium.com/@robert.broeckelmann/identity-broker-an-sso-protocol-transition-fromopenid-connect-to-ws-federation-4af854cf113b|target='_blank'] - based on information obtained 2018-09-01-
* [#3] - [Google and Mastercard Cut a Secret Ad Deal to Track Retail Sales|https://www.bloomberg.com/news/articles/2018-08-30/google-and-mastercard-cut-a-secret-ad-deal-to-track-retail-sales|target='_blank'] - based on information obtained 2018-09-01-
This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthorTop