Liberty Alliance Converges with SAML

By David Worthington | Published February 11, 2005, 7:26 PM

In the past, cooperation among identity management standards organizations consisted of thinly laced talk about convergence. Today, at least two identity specifications are one step closer to being drawn together.

The Liberty Alliance has announced the public draft release of ID-WSF 2.0, the second generation of its federated identity and Web service standards framework. The framework continues to advance on a feature by feature basis; most significantly, WSF 2.0 supports OASIS's SAML 2.0 secure data exchange specification.

Liberty Alliance is a consortium of over 150 companies dedicated to the establishment of open federated network identity standards. That being said, Liberty is one of many such organizations. Another chief participant in the space is Organization for the Advancement of Structured Information Standards (OASIS), which plays host to both OASIS Security Service (SAML) and the XRI Data Interchange (XDI) technical committees.

SAML is an XML-based framework that facilitates the secure exchange of security credentials between Web services. WSF 2.0 has been drafted to help define how SAML 2.0 assertions should be used to relay information between identity-based Web services. All existing and future SAML 2.0 projects are compatible to work with the Liberty specifications.

Liberty's support of SAML 2.0 in its framework is hailed by some as an example of the type of step that is necessary for a longitudinal convergence of standards.

Gerry Gebel, senior analyst with Burton Group, said in a statement, "SAML 2.0 is a significant convergence point in the evolution of federation standards. It's important that vendors and other organizations involved in the standards development process provide a clear roadmap to support this latest version of SAML."

Support for SAML 2.0 is the first stopping point in a multi-phase rollout of WSF 2.0. The specification has two more stops to go before it is approved by the end of 2005. Upcoming enhancements are: automatic notifications of changes from Web service providers; centrally managed group identities; principally referenced lists of contacts to enable the sharing of digital assets among friends/colleagues; and the discovery of device profiles that will expand the depth of available authentication mechanisms.

More precise information on WSF 2.0 is available on the Liberty Alliance Web site.

View comments by with a score of at least

Mark Russinovich on MinWin, the new core of Windows

The next version of Windows three years hence will likely build onto a significant architectural change implemented in Windows 7 and Server 2008 R2.

Security firm: Windows patches not responsible for 'Black Screen of Death'

On second thought, maybe that access control list thingie with the lockdown something-or-rather didn't trigger an alleged, perhaps non-existent, pandemic.

My Windows 7 confession (and why you should confess, too)

I've held back the real reason for sticking with Windows 7, even as, gulp, iLife calls me to go back to the Mac.

Apple settles with Psystar except for 'circumvention devices'

The fracas with the Florida clone computer maker might have ended today had Apple not have muddled the issue over a cheap piece of Psystar software.

Google begrudgingly adjusts news crawling for paid publishers

If publishers want to make readers pay for news content, and thereby drive down its popularity and Google ranking, the company says, they can just go right on ahead.

Fee or free? Murdoch, Huffington square off over the cost of Internet news

Participants in an FTC workshop yesterday witnessed the two extremes of the Web news publishing debate, still centered on the issue of long-term profitability.

Microsoft denies latest 'Black Screen of Death' claims

After an anti-malware producer announced a fix to what it says is a swarm of recent KSoD problems, evidence of the swarm itself has yet to turn up.

Latest Firefox 3.6 beta fixes 133 bugs, promises faster page load times

A once-sluggish beta testing process has kicked into overdrive, with astonishing success at finding serious bugs. Will Mozilla be able to fix all the others in time?

Confirmed: Office 2010 to ship in June

Two weeks after Microsoft had been expected to draw a clearer roadmap for its principal applications suite, it's finally ready to commit to the end of H1.

New EU antitrust commissioner will oversee Microsoft, Oracle+Sun, Intel issues

As one of Europe's most prominent politicians shifts positions in January, her replacement remains a question mark over technology's biggest issues.

Without its own 'iTablet' yet, is Apple missing the boat?

Steve Jobs is on record as dissing "single-purpose" devices like e-readers. But given their recent popularity, was that a mistake?