SOA Identity Architect | SOA IDENTITY NETWORK | THE SOA NETWORK

Federated Identity Patterns in a Service-Oriented World

Gary E Smith - THE SOA NETWORK — Fri, 22 Aug 2008 19:42:32 GMT

Federated Identity Patterns in a Service-Oriented World

Summary: Throughout the last decade, identity-federation techniques have been a fundamental complement of distributed programming technologies such as COM+ or CORBA. However, it is not a secret that the use of identity federation on those technologies never gained a wide adoption in real-world implementations, mostly due to some of the limitations that those technologies present in terms of interoperability or the use of proprietary protocols. Some of those challenges had a big influence on the adoption of Web services as the architecture style of choice for implementing distributed solutions. Consequently, during the last few years, Web services has emerged as the new battlefront for identity-federation solutions. In this article, we examine several identity patterns, and consider the strengths and weaknesses of each model.

Introduction
Principles of Web Services Federation
Web Services Federation Patterns
Standards
Conclusion

For the complete article: Federated Identity Patterns in a Service-Oriented World

SOURCE: Microsoft - The Architecture Journal

_________________________________________________________________________________________

Submit Press Releases to THE SOA NETWORK send to SOA@pr2web.com.

(Content must be related to Service-Oriented Architecture to be published -
for more details visit www.pr2web.com).

For more resources on SOA IDENTITY check out the: SOA IDENTITY NETWORK

_________________________________________________________________________________________

Sun Microsystems and Aware, Inc. Announce Integration of Aware's BioSP with Sun Identity Management Solutions

Gary E Smith - THE SOA NETWORK — Sun, 17 Aug 2008 06:50:22 GMT

Sun Microsystems and Aware, Inc. Announce Integration of Aware's BioSP with Sun Identity Management Solutions

Collaboration delivers a comprehensive next-generation identity management platform, complete with biometric enrollment, authentication, data formatting, and background check connectivity

BEDFORD, Mass., Aug 05, 2008 /PRNewswire-FirstCall via COMTEX/ -- Sun Microsystems, Inc. and Aware, Inc., a global provider of biometrics software, today announced the integration of Aware's Biometric Services Platform (BioSP(TM)) with Sun identity management solutions. The integration of BioSP with Sun Java System Identity Manager introduces a next-generation biometrics-enabled identity management solution with comprehensive biometric capabilities for delivering Personal Identity Verification (PIV) and other mission-critical biometric identity assurance solutions. The integration of BioSP with Sun Java System Access Manager enables fingerprint-based biometric authentication for establishing single sign-on (SSO) and identity federation. BioSP leverages over fifteen years of technical leadership in the biometrics industry towards a complete biometric solution that addresses the ever-advancing demands of the identity assurance marketplace.

"Bridging the gap between physical and logical access is one of the biggest challenges facing our U.S. and Global Government customers. They will benefit from the integration of leading Identity Lifecycle Management applications that are in compliance with HSPD-12/PIV and ICAO standards," said Bill Vass, President and Chief Operations Officer, Sun Microsystems Federal, Inc. "Combined with Sun's strength in identity-based security and management, Aware's BioSP helps Sun with biometric enrollment and enabling biometric credentials for smartcard issuance and multi-factor authentication."

"The completion of this project caps off a substantial effort by technical staff of both companies to deliver and deploy an identity management solution with comprehensive biometric capabilities," commented Robert Mungovan, Vice President of Aware's Biometrics and Imaging Group. "Its modular, service-oriented design makes it uniquely flexible and easy to deploy for both government and private sector credentialing and identity assurance applications."

Together with Aware's biometric enrollment software components on a client, BioSP enables Sun Identity Management Suite with advanced biometric functionality, including:

    -- fingerprint, face, and iris autocapture and enrollment
    -- standards-compliant formatting and parsing of interoperable biometric
    data structures
    -- secure transport and archival of biometric images, templates, and
    metadata
    -- biometric authentication for enterprise and Web-based applications
    -- connectivity with FBI IAFIS and OPM for fingerprint-based background
    checks
    -- connectivity with card management systems and certificate authorities

BioSP has been verified and integration-tested with Java Enterprise System Release 5 running on Solaris 10 and Solaris 10 Trusted Extensions. Aware BioSP also delivers wire-speed performance on transport/message-level security by taking advantage of on-chip cryptographic acceleration provided by Sun SPARC Enterprise T5120 and T5220 systems.

About BioSP

BioSP is a modular, flexible, server-based software platform that enables developers and integrators to rapidly build and deploy centralized multimodal biometric data processing solutions in support of a service-oriented architecture (SOA). BioSP facilitates automation by using biometric and biographic data to drive related business processes. It is ideally suited for applications that require the collection of biometrics throughout a distributed network, and subsequent aggregation, analysis, processing, and integration of this data with other enterprise solutions. Examples include the use of remote enrollment workstations to capture biometric data and submit it to a central database, IDMS, CMS, or a biometric identification system. BioSP can manage all aspects of the transaction workflow, including messaging, submissions, responses, and logging. More information about BioSP is available at www.aware.com/BioSP.

About the Sun Java System Identity Management Suite

The Sun Java System Identity Management Suite is at the core of the Sun Java Enterprise System, a revolutionary, open-source, subscription-based approach to infrastructure software that reduces cost and complexity throughout the data center. The suite includes Sun Java System Identity Manager, Sun Java System Access Manager, Sun Java System Role Manager and Sun Java System Directory Server Enterprise Edition. The Sun Java Enterprise System runs as part of the Solaris Enterprise System, the only comprehensive and open infrastructure software platform available today. It also runs on other leading platforms such as Windows and Linux.

About Aware

Aware is a veteran of the biometrics industry, providing biometric and imaging software components used in government systems worldwide since 1992. Aware's interoperable, standard-compliant, field-proven imaging products are used in a number of applications, from border management to criminal justice to medical imaging. Aware is also a leading technology supplier for the telecommunications industries. For more than ten years, Aware has pioneered innovations at telecommunications standards-setting organizations and continues to develop and market DSL silicon intellectual property and test and diagnostics products. Its StratiPHY(TM) IP product line supports DSL standards, including ADSL2+ and VDSL2, and has been broadly licensed to leading semiconductor companies. Telecom equipment vendors and phone companies use Aware's DSL test and diagnostics modules and Dr. DSL(R) software to help provision DSL circuits globally. Aware is a publicly held company based in Bedford, Massachusetts. www.aware.com

About Sun Microsystems, Inc.

Sun Microsystems develops the technologies that power the global marketplace. Guided by a singular vision -- "The Network is the Computer" -- Sun drives network participation through shared innovation, community development and open source leadership. Sun can be found in more than 100 countries and on the Web at http://sun.com

_________________________________________________________________________________________

For more resources on SOA IDENTITY check out the: SOA IDENTITY NETWORK

_________________________________________________________________________________________

U.S. Department of Veterans Affairs Taps Merlin International to Provide CA Solutions for Identity and Access Management

Gary E Smith - THE SOA NETWORK — Tue, 29 Jul 2008 07:09:59 GMT

U.S. Department of Veterans Affairs Taps Merlin International to Provide CA Solutions for Identity and Access Management

Robust Identity and Access Management to Safeguard VA Employees' and Veterans' Personal Information and Make It Easier to Access Web-Based Information and Applications

DENVER & ISLANDIA, N.Y.--(BUSINESS WIRE)--Merlin International and CA, Inc. (NASDAQ: CA) today announced that Merlin has been selected by the U.S. Department of Veterans Affairs (VA) to provide CA’s robust identity and access management solutions to support the majority of the Department’s identity management and access management requirements. The solutions are designed to enable VA to leverage e-Authentication, verify proper access to information, protect data, simplify internal systems, and enhance compliance with FISMA, HSPD 12 and HIPAA.

VA makes benefits and services available for approximately 60 million veterans and their family members. With more than 230,000 employees, 153 medical centers and 800 Community Based Outpatient Centers, VA is the largest direct health care delivery system in America. By deploying enterprise-wide identity and access management solutions, VA will be able to provide secure delivery and access to Web-based applications; enhance veteran access to benefit and health information; improve regulatory compliance; improve inter-agency collaboration; and enhance overall agency security.

“Merlin’s partnership with VA to deliver quality healthcare and benefits to Veterans currently spans a broad list of initiatives including this new engagement to deliver identity and access management,” said John Trauth, president of Merlin’s Technology Systems Division. “Securing confidential information and ensuring that only authorized staff has access is critical to delivering the highest caliber service. Together with CA, our Veterans will have that confidence.”

“VA has millions of unique identities to manage – from its employees to Veterans. Its range of services, including healthcare and benefits for Veterans, relies on the safety of data as well as a need to share personally identifiable information with other agencies,” said Joe Page, Senior Vice President of Public Sector Sales from CA. “By implementing an enterprise-wide identity and access management solution, VA is taking proper measures to protect the privacy and personal information of its constituents and ensure that only authorized users have access to restricted data. We are very pleased to partner with Merlin to provide a solution to help VA efficiently and effectively manage, authenticate, track and validate identities.”

VA selected the following CA leading identity and access management products: CA SiteMinder, CA Identity Manager, CA Enterprise Single Sign On, CA Federation Security Services, CA Access Control, CA Directory, and CA SOA Security Manager with XML Gateway, to help create an enterprise-wide solution.

For more information about CA identity and access management, please visit www.ca.com/us/it-security-solutions.aspx.

About CA

CA (NASDAQ: CA), one of the world’s largest independent software companies, provides software solutions to unify and simplify™ IT management. With CA’s Enterprise IT Management (EITM) vision and expertise, organizations can more effectively govern, manage and secure IT to optimize business performance and sustain competitive advantage. Founded in 1976, CA serves customers in virtually every country in the world. For more information, please visit www.ca.com.

About Merlin International

Merlin International is one of the fastest growing public sector IT solutions providers in the United States. Based in Denver, with offices in Vienna, Va., Linthicum, Md., and Scott Air Force Base, Merlin delivers technology solutions and services for a broad range of organizations including the Department of Homeland Security, the Department of Defense, civilian and intelligence agencies, as well as state and local governments. The company’s solution expertise includes Managed Content, Enterprise Messaging, Information Assurance, and Business Systems Management. Today, more than 500 clients count on Merlin's expertise to help them define, integrate, deploy, and maintain systems and networks that align information technology with program and business goals. Learn more about Merlin at www.merlin-intl.com.

_________________________________________________________________________________________

For more resources on SOA IDENTITY check out the: SOA IDENTITY NETWORK

_________________________________________________________________________________________

_________________________________________________________________________________________

Back to Main Page

Gary E. Smith
SOA Identity Architect - SOA Identity in a Connected World

IT RESOURCE NETWORK

THE BPM NETWORK | THE SAAS NETWORK | THE SOA NETWORK | THE WEB 2.0 NETWORK

WSO2 Extends SOA Governance With Identity Solution 1.5, Featuring Support for OpenID-Based Open Source Authentication

Gary E Smith - THE SOA NETWORK — Mon, 14 Jul 2008 18:10:46 GMT

WSO2 Extends SOA Governance With Identity Solution 1.5, Featuring Support for OpenID-Based Open Source Authentication

WSO2 Joins Leading Electronic ID Authentication Groups: OpenID Foundation and Information Card Foundation

MOUNTAIN VIEW, Calif.--(BUSINESS WIRE)--WSO2, the open source SOA company, today announced that it has extended its support for service-oriented architecture (SOA) governance through enhanced authentication. Version 1.5 of the WSO2 Identity Solution for strong Web authentication based on open standards and open source is now generally available and adds support for OpenID, a popular feature for decentralizing single sign-on. Additionally, WSO2 has joined the OpenID Foundation and is a founding member of the Information Card Foundation, which was launched June 23, 2008.

The WSO2 Identity Solution enables websites, including LAMP¹ and Java, to provide strong authentication using information cards that serve as electronic IDs for users. Version 1.5 adds support for OpenID — which is rapidly becoming the market leader for strong authentication in Web applications, blogs and other Web 2.0 websites. By basing OpenID support on OpenID4Java, the WSO2 Identity Solution 1.5 offers a very high level of interoperability with other OpenID systems that makes it simple to become an OpenID consumer and/or an OpenID provider. This functionality complements the existing capabilities in the WSO2 Identity Solution around information cards and Microsoft CardSpace technologies, giving enterprises more options than ever for implementing consistent identity management across their Web and SOA applications.

“Electronic IDs, such as OpenID and CardSpace-based information cards, are rapidly gaining popularity as decentralized, user-centric approaches to authentication that eliminate the risks and inconvenience of password-based alternatives,” said Dr. Sanjiva Weerawarana, CEO of WSO2. “By offering both OpenID and CardSpace authentication, version 1.5 of our WSO2 Identity Solution extends our commitment to strong SOA governance by managing and protecting the identities of the many users served by today’s heterogeneous SOAs and Web applications.”

WSO2 OpenID Support Extends Authentication Options

The WSO2 Identity Solution 1.5 features the easy-to-use Identity Provider application for issuing cards, including those based on CardSpace, and OpenIDs for identity management. It is controlled by a simple Web-based management console and supports interoperability with multiple vendors’ OpenID and CardSpace components. The WSO2 Identity Solution 1.5 also provides a Relying Party Component Set, which plugs into most common Web servers to add support for CardSpace and OpenID authentication requests. Additionally, the WSO2 Identity Solution works with enterprises’ current identity directories, such as those based on the Lightweight Directory Access Protocol (LDAP) and Microsoft Active Directory, allowing them to leverage their existing infrastructure.

Key features of the WSO2 Identity Solution 1.5 include:

Security Assertion Markup Language (SAML) 2.0 support. The SAML XML standard for exchanging authentication and authorization data between security domains has become the dominant underlying structure of Web single sign-on solutions for enterprise identity management.
Multi-factor authentication using a combination of OpenID and information cards to provide higher level security and fight phishing attacks.
Broad OpenID support, including the 1.1 and 2.0 OpenID standards, and many OpenID model extensions, including Simple Registration, Attribute Exchange, and the Provider Authentication Policy extension (PAPE).
Easy access management, including white-listing and black-listing.
Heterogeneous support via Relying Parties. The WSO2 Identity Solution can work with any Web framework running on Apache2 — including PHP, Python and Perl applications — as well as applications written to the Java Servlet API, such as those running on the Apache Tomcat and JBoss application servers. The emerging i-name standard is also supported.

Contributing to Electronic ID Community

WSO2 has joined two of the leading organizations to promote the standardization of authentication based on electronic IDs. Last month, WSO2 joined some of the industry’s largest companies — including Equifax, Google, Microsoft, Novell Oracle and PayPal — in becoming a founding member of the Information Card Foundation (ICF), which aims encourage interoperability in business around electronic ID card standards. For more information on the ICF, visit http://www.informationcard.net/. WSO2 also has joined the OpenID Foundation, which seeks to help promote, protect and enable the OpenID technologies and community, and counts Google, IBM, Microsoft, VeriSign and Yahoo! among its members. To learn more about the OpenID Foundation, visit http://openid.net/.

Availability and Support

The WSO2 Identity Solution 1.5 is available for download today. As a fully open source solution released under the Apache License 2.0, the WSO2 Identity Solution does not carry any software licensing fees. WSO2 offers a range of service and support options for the WSO2 Identity Solution. These include support subscriptions, training, consulting, custom development and development support. For information on service and support packages, visit http://wso2.com.

About WSO2

WSO2 is the open source SOA company founded by pioneers in Web services and the Apache Software Foundation Web services community. The company delivers the only tightly integrated, entirely open source middleware stack that is optimized for SOA. The WSO2 products address the core components of SOAs: service creation, connection, composition and governance. The company is backed by Intel Capital and maintains operations in the United States, United Kingdom and Sri Lanka. For more information, visit http://wso2.com.

¹LAMP: open source Web platform consisting of Linux, Apache, MySQL, and PHP

_________________________________________________________________________________________

For more resources on SOA IDENTITY check out the: SOA IDENTITY NETWORK

_________________________________________________________________________________________

_________________________________________________________________________________________

Back to Main Page

Gary E. Smith
SOA Identity Architect - SOA Identity in a Connected World

IT RESOURCE NETWORK

THE BPM NETWORK | THE SAAS NETWORK | THE SOA NETWORK | THE WEB 2.0 NETWORK

Alcatel-Lucent Selects IBM Security Software to Implement Large-Scale Identity and Access Management Initiative

Gary E Smith - THE SOA NETWORK — Thu, 22 May 2008 19:02:47 GMT

Alcatel-Lucent Selects IBM Security Software to Implement Large-Scale Identity and Access Management Initiative

May 20, 2008: 10:00 AM EST

IBM (NYSE: IBM) today announced that Alcatel-Lucent (Euronext Paris: ALU) (NYSE: ALU) has selected IBM Tivoli identity management software to help support its efforts to increase security measures, improve employee efficiency, reduce help desk costs and support compliance initiatives.

Alcatel-Lucent is deploying IBM Tivoli Identity Manager and creating a standardized process for managing the digital identities of its employees and contractors, with plans to expand the scope to its suppliers, resellers and other business partners. With this new process, the company expects to reduce the total cost of running its IT service desk by about 10 percent.

"Expectations for real-time access, regulatory compliance, operational cost optimization and mobility of the workforce are key drivers for streamlining our user account provisioning processes," said Elizabeth Hackenson, Alcatel-Lucent CIO. "IBM's expertise and software have helped us develop a global user identity management program, providing us an automated tool to manage our user accounts, while reducing costs."

The initiative replaces various user provisioning processes with one integrated, standardized user management system. It provides Alcatel-Lucent greater visibility into system-wide user identities, and uses automated software to streamline processes and tasks, lowering IT support costs.

With IBM Tivoli Identity Manager's password self-reset feature, which allows users to reset and synchronize their passwords on-line, the company expects to reduce password-related calls to the IT service desk by 70 percent and provide increased productivity for both system users and support staff. Additionally, the new system can automatically close accounts of employees who have left the company, helping to eliminate related security risks and improving the data quality of the company directories. The IBM Tivoli software also helps to support Alcatel-Lucent's compliance efforts with worldwide Sarbanes-Oxley requirements.

By expanding its identity management program to include users from its network of business partners, Alcatel-Lucent can provide new, secure levels of information sharing, access, and monitoring, helping to support its partners and promote channel growth.

"Alcatel-Lucent has demonstrated leadership through its sustainable business strategy, focused on adopting a business-driven risk management approach," said Sean Bergin, director, worldwide sales, IBM Tivoli security and compliance software. "Today's forward-thinking business leaders look differently at IT security -- a security strategy should manage risk and support business goals, but also help drive business growth by opening new, secure doors of opportunity."

IBM leads in Identity and Access Management worldwide revenue, according to analyst firm IDC (1), thanks in part to the strength of key offerings such as IBM Tivoli Identity Manager, Tivoli Access Manager and Tivoli Federated Identity Manager.

IBM Tivoli Identity Manager software takes a risk-based approach to help clients effectively manage user accounts, access permissions and passwords for employees, customers and other IT system users from creation to termination. It provides a centralized point for administering users, their passwords, business roles and access rights -- helping to ensure that business and security policy is set on all systems and applications across the company. The software also automates for businesses the manual process of setting-up new accounts and resetting user passwords.

IBM's Tivoli security software helps prevent unauthorized access to valuable customer, employee and business data and facilitates compliance with corporate security policy and regulatory requirements. It is part of IBM's portfolio of service management software which automates some of the most challenging processes associated with managing complex IT environments, such as managing storage devices and deploying new software releases and patches. The software helps customers fight rising IT costs, manage constant change and meet the demand to stay competitive.

For more information on IBM Tivoli security and compliance management software, please visit www.ibm.com/software/tivoli/solutions/security.

For more information on Alcatel-Lucent, please visit www.alcatel-lucent.com.

(1) IDC, "Worldwide Identity and Access Management 2007-2011 Forecast and 2006 Vendor Shares," Doc # 207609, July 2007.

_________________________________________________________________________________________

For more resources on SOA IDENTITY check out the: SOA IDENTITY NETWORK

_________________________________________________________________________________________

_________________________________________________________________________________________

Back to Main Page

Gary E. Smith
SOA Identity Architect - SOA Identity in a Connected World

IT RESOURCE NETWORK

THE BPM NETWORK | THE SAAS NETWORK | THE SOA NETWORK | THE WEB 2.0 NETWORK

New IBM Software Simplifies SOA Identity

Gary E Smith - THE SOA NETWORK — Tue, 20 May 2008 19:36:20 GMT

New IBM Software Simplifies Application Identity for Service Oriented Architectures

Software Brings User-centric Identity and Security to SOA Environments, Improves Interoperability and Eases Business Partner Collaboration

IBM (NYSE: IBM) today announced details of new application security software designed to help clients securely manage employee, partner and customer IT users and their access to company applications and information.

The new release of IBM Tivoli Federated Identity Manager software focuses on enabling a company's separate business divisions to deploy secure software applications using open standards and a wide range of security credentials without needing to embed complex security logic into each application. The solution simplifies application integration using many forms of user credentials and facilitates the secure sharing of information between trusted parties -- such as business partners or separately managed divisions within an organization operating in an SOA environment.

IBM, the current leader in Identity and Access Management software revenue, according to analyst firm IDC (1), bolsters its existing portfolio with this new release that provides new management capabilities, user-centric identity technology and substantially extended interoperability with several open industry standards and other vendors' software.

"With its extended interoperability, IBM Tivoli Federated Identity Manager is uniquely positioned to simplify application security integration, enabling business process and application owners to deliver their services without being constrained by IT security and compliance issues," said Venkat Raghavan, director of product management, IBM Tivoli security, risk and compliance software. "This enables clients to tie together various organizational and business silos while also simplifying the integration between their company and partners' Web sites."

The vexing challenge for developers building applications is how to deal with the multitude of user credentials that need to be managed while providing end-to-end security. Using an office building analogy, end-to-end security could entail electronic locks opened by employee badges on the front door and keys for individual offices and file cabinets that store business critical information. Similarly, in the IT environment, it is common to have a single application that needs to support many forms of user credentials as business processes and organizations are linked across many facets of a company, including mainframe applications. Managing and securing access to a company's many services, applications and data are needed to meet security and compliance requirements.

This new IBM Tivoli software release automates the management of user credentials across applications without the application specialists needing to be security experts. Application owners define the type of credential needed based on an application's risk profile, and end users who present their credentials are automatically signed-on and given access to the various parts of the applications as appropriate. The software also provides auditors with a single view of the credentials used to help validate that the user access matches policy.

IBM Software Brings New User-Centric Identity to SOA Applications

The new IBM Tivoli Federated Identity Manager now provides businesses the flexibility to integrate with leading user-centric identity management technology and frameworks, including OpenID, Microsoft Windows CardSpace and Eclipse's Higgins Identity Frameworks.

User-centric identity management provides a means for users to control what information they share about themselves. Similar to a college id, driver's license and a passport, the user is able to choose which identification claims will be used when a situation requires it. IBM software now enables organizations to bring these identities into one central, federated identity management system that supports traditional identities in addition to the emerging user-centric frameworks.

While reusing existing applications and Web services can dramatically reduce SOA implementation costs, applications are often developed independently and have different formats to define, share and audit user identities. IBM Tivoli Federated Identity Manager's built-in SOA Identity Service provides the ability to manage and audit identities across a wide range of formats and vendors' applications to help maintain identity context throughout use in an SOA environment. This helps provide clients a unified approach to manage and report on user identities across shared applications, including portal environments.

The software now supports various user and application credentials such as RACF Passticket, Kerberos, SAML, WS-Security and platform specific credentials used by Microsoft .NET, IBM WebSphere, SAP NetWeaver, Oracle and CA. When combined with leading user-centric identity management technology and frameworks, including OpenID, Microsoft Windows CardSpace and Eclipse's Higgins Identity Frameworks, the software provides the required flexibility for business process and application owners to quickly and securely provide services to their business.

"Already a recognized leader in federated identity management, one should expect IBM's ability to extend its integration with other vendors' Web access management software and the major open standards and user-centric identity management approaches to help speed the adoption of secure SOA and federated identity around the world," said Sally Hudson, research director within IDC's security products and services group.

The new IBM Tivoli Federated Identity Manager will be generally available worldwide in June 2008.

For more information on IBM Tivoli Federated Identity Manager, visit www.ibm.com/software/tivoli/products/federated-identity-mgr/.

(1) IDC, "Worldwide Identity and Access Management 2007-2011 Forecast and 2006 Vendor Shares," Doc # 207609, July 2007.

_________________________________________________________________________________________

For more resources on SOA IDENTITY check out the: SOA IDENTITY NETWORK

_________________________________________________________________________________________

_________________________________________________________________________________________

Back to Main Page

Gary E. Smith
SOA Identity Architect - SOA Identity in a Connected World

IT RESOURCE NETWORK

THE BPM NETWORK | THE SAAS NETWORK | THE SOA NETWORK | THE WEB 2.0 NETWORK

Daon Releases Latest Version of Award-Winning Software Platform

Gary E Smith - THE SOA NETWORK — Sun, 04 May 2008 07:32:17 GMT

Daon Releases Latest Version of Award-Winning Software Platform

RESTON, Va.--(BUSINESS WIRE)--Daon, a leading provider of identity assurance software announced today the release of DaonEngine Version 4.0. Daon recently received the 2008 Frost & Sullivan Award for Global Biometrics Product Line Strategy Leadership and with this latest release the company further solidifies its position as the biometric identity assurance platform leader. DaonEngine 4.0 provides important new capabilities and extended functionality which allows Daon partners to deliver flexible and secure identity assurance solutions more quickly. The company also announced that it has been awarded a contract by a major US government agency to license DaonEngine 4.0.

With its enhanced, standards-based web services capabilities, Daon extends its support for Service Oriented Architectures (SOA), thereby allowing customers to realize their vision of offering biometric identity services to applications internal or external to the enterprise. Additionally, DaonEngine 4.0 offers enhanced fusion and normalization support, asynchronous operations, NIST processing, systems monitoring support as well as Java Message Service (JMS) support.

Tony Damalas, vice president, technology for Diebold Government Solutions, a unit of Diebold, Incorporated’s (NYSE:DBD), Global Security division, commented on the new Daon release saying, “We are very excited about this announcement and believe these enhancements to the core Daon product are critical in our joint markets. DaonEngine 4.0 offers unique advantages to our customers and allows for easier integration between our products. It’s always exciting to team with a company that thrives on innovation.”

“As technology markets mature, we often see a shift from custom development to COTS offerings to achieve lower costs, faster implementations and more flexible systems. Just as we have observed that shift in the database and ERP markets, we are now seeing that trend in the identity assurance space. The adoption of Daon’s mature platform by customers around the world is one example of this trend,” according to Dilip Sarangan, Lead Analyst for Frost & Sullivan’s Security Practice.

About Daon

Daon is a leading provider of identity assurance software products focused on meeting the needs of governments and commercial organizations worldwide. Daon supports customers and system integrators in building enterprise solutions requiring the highest level of security, performance, scalability, reliability and privacy. The DaonApplicationSuite provides a powerful tool for faster development of scalable, robust and secure identity registration and vetting solutions. Daon’s multi-modal authentication infrastructure, DaonEngine, integrates seamlessly with IT platforms and applications and manages the identity life-cycle of small and large populations. Daon’s offices are located in Washington DC, Canberra, London and Dublin.

For further information please visit www.daon.com.

_________________________________________________________________________________________

For more resources on SOA IDENTITY check out the: SOA IDENTITY NETWORK

_________________________________________________________________________________________

_________________________________________________________________________________________

Back to Main Page

Gary E. Smith
SOA Identity Architect - SOA Identity in a Connected World

IT RESOURCE NETWORK

THE BPM NETWORK | THE SAAS NETWORK | THE SOA NETWORK | THE WEB 2.0 NETWORK

Liberty Alliance Showcases Consumer and Business Benefits of Open and Proven Interoperable Identity Standards at RSA Conference 2008

Gary E Smith - THE SOA NETWORK — Tue, 29 Apr 2008 20:44:18 GMT

Liberty Alliance Showcases Consumer and Business Benefits of Open and Proven Interoperable Identity Standards at RSA Conference 2008

April 7 Event Demonstrates Liberty Alliance Applications that Enable New Business Services and Provide Users with Greater Online Security and Privacy Protection

SAN FRANCISCO, March 26 /PRNewswire/ -- Liberty Alliance, the global identity consortium working to build a more trusted internet for consumers, governments and businesses worldwide, today announced the Identity Federation and Web Services: Happening Today - Enabling Tomorrow workshop taking place at RSA Conference 2008 in San Francisco on Monday, April 7 from 1:00 - 4:30pm. The interactive event features Liberty Alliance members from CA, Intel, NTT, Ping Identity and RSA presenting case studies, demonstrations and cutting-edge proof-of-concept applications built using open and proven interoperable identity standards from Liberty Alliance.

"With hundreds of RSA Conference participants already registered to attend and a wide variety of new Liberty-based applications on display, the April 7 workshop showcases the deployment momentum Liberty Alliance standards are experiencing across global markets today," said Roger Sullivan, president of the Liberty Alliance Management Board and vice president of Oracle Identity Management. "Presenters will review case studies focusing on user and business benefits of applications in the enterprise, health care, technology and telecom sectors to demonstrate why organizations worldwide are relying on identity standards from Liberty Alliance to deploy more secure and privacy- respecting identity services."

The workshop will feature Liberty Alliance members and customer organizations presenting identity applications that leverage Liberty Advanced Client, Liberty Federation and Liberty Web Services standards. Developed based on well defined use cases and market requirements, demonstrations will show how Liberty's portfolio of interoperable identity standards provides developers, system integrators and organizations in every sector with the foundation for driving security and privacy into identity-consuming applications spanning industries, networks and devices. Highlights from the applications that will be presented during the April 7 workshop include:

CA - Case studies from CA customers BT & MEDecision covering respectively SAML-based identity federation and standards-based Web services security. These case study presentations will review the business drivers, high-level architectures, key technology and policy decisions, results to date, future plans, and lessons learned at these organizations. The case studies will show that both federation and Web services initiatives are happening today and enabling tomorrow.

Intel - Intel Corporation will review a digital identity life-cycle management proof-of-concept solution based on the Liberty Advanced Client specifications and an Intel Identity Capable Client. The demonstration will show how a secure digital identity could be remotely provisioned and managed by a telco such as BT for the purpose of authenticating users for access to converged networks.

NTT - NTT will present the Virtual Credential Container technology currently being developed within NTT Information Sharing Platform Laboratories. The technology will enable users to securely store and manage identity credentials in a virtualized and separated environment on a client device, such as PC. A converged network access scenario will be demonstrated using the Virtual Credential Container technology with Liberty Advanced Client specifications and Intel's Identity Capable Platforms.

Ping Identity - Ping Identity will review Auto-Connect, a new dynamic federation capability available in the company's PingFederate 5.0 federated identity software. The session will show how dynamic federation uses SAML 2.0 capabilities and how Ping eliminates manual activities that previously had to be performed by administrators to configure and test SAML connections.

RSA - RSA, The Security Division of EMC - Geisinger Health System, a leader in the country's rapidly emerging Electronic Health Records movement will discuss their application of RSA federation technology to improve clinical decision making within the emergency room. The organization will review the real benefits achieved, lessons learned and what the future holds for the project.

About the Liberty Alliance RSA Conference 2008 Workshop

The Identity Federation and Web Services: Happening Today - Enabling Tomorrow workshop will overview how CA, Intel, NTT, Ping Identity, RSA and customer organizations are successfully utilizing Liberty Alliance standards to implement state-of-the-art identity management solutions that strengthen security, increase privacy and offer end users and deploying organizations new levels of digital identity management simplicity. With opening remarks from Brett McDowell, executive director of Liberty Alliance, presenters will review the business drivers, high-level architectures, key technologies and policy decisions involved in developing and managing Liberty-enabled applications. The workshop is free of charge and open to all RSA Conference participants.

The complete agenda and registration is available at http://tinyurl.com/2kmrcc

_________________________________________________________________________________________

For more resources on SOA IDENTITY check out the: SOA IDENTITY NETWORK

_________________________________________________________________________________________

_________________________________________________________________________________________

Back to Main Page

Gary E. Smith
SOA Identity Architect - SOA Identity in a Connected World

IT RESOURCE NETWORK

THE BPM NETWORK | THE SAAS NETWORK | THE SOA NETWORK | THE WEB 2.0 NETWORK

SOA Identity Architect | SOA IDENTITY NETWORK | THE SOA NETWORK

Federated Identity Patterns in a Service-Oriented World

Contents

Sun Microsystems and Aware, Inc. Announce Integration of Aware's BioSP with Sun Identity Management Solutions

U.S. Department of Veterans Affairs Taps Merlin International to Provide CA Solutions for Identity and Access Management

WSO2 Extends SOA Governance With Identity Solution 1.5, Featuring Support for OpenID-Based Open Source Authentication

Alcatel-Lucent Selects IBM Security Software to Implement Large-Scale Identity and Access Management Initiative

New IBM Software Simplifies SOA Identity

Daon Releases Latest Version of Award-Winning Software Platform

Liberty Alliance Showcases Consumer and Business Benefits of Open and Proven Interoperable Identity Standards at RSA Conference 2008