The identity-management tag has no wiki summary.
0
votes
0answers
38 views
Top SAML 2.0 identity providers in the market [closed]
I am working on a product (service provider) which uses SAML 2.0 for authentication purpose. Having said that I wanted to know what you all think are the top and most trusted identity providers that ...
4
votes
3answers
161 views
How can I verify the identity of a US | UK -based person and prevent *fake identities* from being accepted?
Given that it's possible to fake ID cards and fake social security numbers are created, I need to ensure that all users of my site are US or UK based citizens, and don't have more than one account.
A ...
1
vote
1answer
271 views
How can I ensure privacy when outsourcing authentication to an IdP (Identity Provider)
I need to outsource authentication to an IdP (Identity Provider) but I don't want that IdP to know of the calling site. The two major issues are the callback URL and the referer header.
Is there any ...
5
votes
1answer
95 views
Are there risks of using the same OpenID provider for sites with different security levels?
I always use the same OpenID provider (Google, with a strong unique pw and 2-factor auth) in every site that supports it, without thinking twice. It's my understanding that, as long as the provider is ...
0
votes
0answers
41 views
What attribute exchange services are available? [closed]
As Identity systems become more popular across the internet there will be increasing benefits from binding a user's personal information to their digital identity. The ability to exchange these ...
2
votes
1answer
220 views
Combining capability-based access control with SAML
I have been looking into various research on identity, PKI and access control trying to boil it down to a simplifies methodology for IAM.
One thing which pops up in lots of places is capability-based ...
