Authentication, authorization and identity o my!

Preview:

Citation preview

Authentication, Authorization and Identity O my!

Tom FreestoneApril 12, 2023

Tom Freestone

BYU Office of IT

Technical Lead Authentication ProductsTechnical Lead Portal Services

Authentication, Authorization and Identity

PastPresentFuture

Back when I was a kid we used real computers …

Web

The Mullet

Intermediary Pattern

Web 2.0

Why CAS?

Security AbstractionMultiple protocols

SAMLOpenIdSpengoCAS

Central Login ScreenB2CChallenges

Wrapping mind around the model

Non Person Persons?

EntityTrustMultiple Authentication

PrincipalEntity

API Key

B2B AuthenticationBusiness Process to Business Process

Design RequirementsTrafficMulti-PurposeSecureSimple, elegant

ChallengesWrap your mind aroundNot a standard

Where to Next?

AttributesAssertions

Federated Authorization

StandardsOAuthSAML 2

Questions

Recommended