...one of the biggest problems facing any implementation of an identity federation is that all of the participants need to be using the same standards and protocols to achieve federation. Unfortunately, as time has progressed a number of different standards have emerged. This is not a big issue if you’re starting out from scratch and all of the applications that are being developed are being built in-house. As long as all of the participants within the federation can agree on a standard, integration issues are unlikely to arise. However, this
News
News lets the community share announcements, press releases, and recommended news articles relevent to IDTrust. (Educational materials that are not time-sensitive are listed at Articles and white papers.)
OASIS Call for Participation: OASIS Cross-Enterprise Security and Privacy Authorization (XSPA) TC
News: Submitted by dschur on Fri, 07/04/2008 - 14:27. Last updated on Fri, 07/04/2008 - 14:28.
A new OASIS technical committee is being formed. The OASIS Cross-Enterprise Security and Privacy Authorization (XSPA) Technical Committee has been proposed.
Statement of Purpose
GM, Boeing Faced Uphill Battle To Reach Global Identity Management
News: Submitted by dschur on Fri, 07/04/2008 - 14:17.
Managers from two multinational companies share their tips on
connecting employees, parts suppliers, other business partners, and
outsourced software developers.
U.S. House Pushes For National E-Health Records
News: Submitted by dschur on Fri, 07/04/2008 - 13:58. Last updated on Fri, 07/04/2008 - 14:15.
The bill, called the "PRO(TECH)T Act," would increase privacy protections and set national standards to exchange health information nationally.
Oasis' open Enterprise Key Management Infrastructure initiative promises less-complex encryption. But will vendors get on board?
News: Submitted by dschur on Fri, 07/04/2008 - 13:50.
Information security pros do put stock in encryption--it was named the
third-most-effective security practice in our most recent Strategic
Security Survey, behind only firewalls and antivirus products. However,
there have been obstacles along the path to ubiquitous encryption of
data, including weak ciphers, deployment and integration issues, and,
perhaps most notably, key management.
Public key infrastructure, or PKI, systems alone have simply failed to address the challenge of keeping encryption keys in order. Enter the


