Asa Hardcastle, Technical Lead for the openLiberty ID-WSF ClientLib Project, announced that the ClientLib Alpha is now available online. The ClientLib uses OpenSAML's Java XML Tooling, SOAP, and SAML2 Libraries. The Identity Web Services Framework (ID-WSF) is a set of open specifications for interoperable, secure, identity-enabled Web services.
News
News lets the community share announcements, press releases, and recommended news articles relevant to IDTrust. (Educational materials that are not time-sensitive are listed at Articles and white papers.)
OpenLiberty ID-WSF ClientLib Project Releases Alpha Code
Cover Pages: Document Format for Expressing Authorization Policies to Tackle Spam for Internet Telephony
Members of the IETF SIPPING Working Group have published an updated draft defining SPIT authorization documents that use SAML. The problem of SPAM for Internet Telephony (SPIT) is an imminent challenge and only the combination of several techniques can provide a framework for dealing with unwanted communication. The responsibility for filtering or blocking calls can belong to different elements in the call flow and may depend on various factors.
NetworkWorld: Internet Identity Workshop throws up the question of what's next in identity?
I expected to learn quite a bit at the Internet Identity Workshop (IIW) - the semi-annual ID geekfest in Mountain View, Calif., and I did indeed learn quite a bit. Some of it was even about identity services, applications and projects. And it appears the question now in identity circles is what comes next?
PingFederate Web Services Provides WS-Trust Security Token Service (STS)
Ping Identity announced that PingFederate Web Services 2.6 is available for immediate download from its Web site. Now packaged as an optional add-on module for PingFederate, Ping Identity's industry-leading standalone federated identity software, PingFederate Web Services 2.6 adds support for the OASIS WS-Trust 1.3 standard, as well as the ability to create and validate CA SiteMinder SMSESSION tokens.
CNET: Expect More PKI in 2008
Wasn't 1999 supposed to be "the year of Public Key Infrastructure (PKI)?" Yes, I know, another analyst prediction that didn't come to fruition. It's fair to chastise the analysts for another missed call, but PKI certainly shares some of the blame. It really is difficult to imagine a "year of PKI" because PKI isn't your typical technology trend. PKI isn't a standalone security widget, it is a complex infrastructure that must be integrated into existing applications and business processes.