Download - From Authentication to Privilege Management to the Attribute Economy: Marketing runs amok…
![Page 1: From Authentication to Privilege Management to the Attribute Economy: Marketing runs amok…](https://reader035.vdocument.in/reader035/viewer/2022062518/56814211550346895dae18de/html5/thumbnails/1.jpg)
From Authentication to Privilege Management to the Attribute Economy:Marketing runs amok…
![Page 2: From Authentication to Privilege Management to the Attribute Economy: Marketing runs amok…](https://reader035.vdocument.in/reader035/viewer/2022062518/56814211550346895dae18de/html5/thumbnails/2.jpg)
Topics
• The simple life
• The Simple Life GUI
• The full IdM life
• The full IdM Life GUI
• The attribute economy
• Living in an attribute economy• Make sure the trust fabrics support the assertions
![Page 3: From Authentication to Privilege Management to the Attribute Economy: Marketing runs amok…](https://reader035.vdocument.in/reader035/viewer/2022062518/56814211550346895dae18de/html5/thumbnails/3.jpg)
User
Application access controls(including network devices)
IdP
Shib
p2p Source ofAuthority
Source ofAuthority
Source ofAuthority
A Simple Life
![Page 4: From Authentication to Privilege Management to the Attribute Economy: Marketing runs amok…](https://reader035.vdocument.in/reader035/viewer/2022062518/56814211550346895dae18de/html5/thumbnails/4.jpg)
User
Application access controls(including network devices)
IdP
Shib
p2p Source ofAuthority
Source ofAuthority
Source ofAuthority
Authn
Autograph
A Simple Life GUI
![Page 5: From Authentication to Privilege Management to the Attribute Economy: Marketing runs amok…](https://reader035.vdocument.in/reader035/viewer/2022062518/56814211550346895dae18de/html5/thumbnails/5.jpg)
User
Application access controls(including network devices)
IdP
Shib
p2p Source ofAuthority
Source ofAuthority
Source ofAuthority
A Full IdM Life
Local apps
![Page 6: From Authentication to Privilege Management to the Attribute Economy: Marketing runs amok…](https://reader035.vdocument.in/reader035/viewer/2022062518/56814211550346895dae18de/html5/thumbnails/6.jpg)
User
Application access controls(including network devices)
Shib
p2p Source ofAuthority
Source ofAuthority
Source ofAuthority
Authn
Autograph
A Full Life GUI
Signet/Grouper
IdP Local apps
![Page 7: From Authentication to Privilege Management to the Attribute Economy: Marketing runs amok…](https://reader035.vdocument.in/reader035/viewer/2022062518/56814211550346895dae18de/html5/thumbnails/7.jpg)
User
Application access controls(including network devices)
IdP
Shib
p2p Source ofAuthority
Source ofAuthority
Source ofAuthority
Portal
Gateway
Proxy
Source ofAuthority
Source ofAuthority
Source ofAuthority
Source ofAuthority
Source ofAuthority
Real Life
![Page 8: From Authentication to Privilege Management to the Attribute Economy: Marketing runs amok…](https://reader035.vdocument.in/reader035/viewer/2022062518/56814211550346895dae18de/html5/thumbnails/8.jpg)
User
Application access controls(including network devices)
IdP
Shib
p2p Source ofAuthority
Source ofAuthority
Source ofAuthority
VO ServiceCenter
Gateway
Source ofAuthority
Source ofAuthority
Source ofAuthority
IdP
An Example Flow in the Attribute Economy
![Page 9: From Authentication to Privilege Management to the Attribute Economy: Marketing runs amok…](https://reader035.vdocument.in/reader035/viewer/2022062518/56814211550346895dae18de/html5/thumbnails/9.jpg)
User
Application access controls(including network devices)
IdP
Shib
p2p
Autograph
Authn
Source ofAuthority
Source ofAuthority
S/GS/G
Portal
![Page 10: From Authentication to Privilege Management to the Attribute Economy: Marketing runs amok…](https://reader035.vdocument.in/reader035/viewer/2022062518/56814211550346895dae18de/html5/thumbnails/10.jpg)
User
Application access controls(including network devices)
IdP
Shib
p2p
Autograph
Authn
Source ofAuthority
Source ofAuthority
S/GS/G
VO Service Center
Source ofAuthority
S/G
A VO Service Center Flow
![Page 11: From Authentication to Privilege Management to the Attribute Economy: Marketing runs amok…](https://reader035.vdocument.in/reader035/viewer/2022062518/56814211550346895dae18de/html5/thumbnails/11.jpg)
Inviting Attributes into your life…
• For privacy and secrecy• For better security• For efficiency
![Page 12: From Authentication to Privilege Management to the Attribute Economy: Marketing runs amok…](https://reader035.vdocument.in/reader035/viewer/2022062518/56814211550346895dae18de/html5/thumbnails/12.jpg)
Peering
![Page 13: From Authentication to Privilege Management to the Attribute Economy: Marketing runs amok…](https://reader035.vdocument.in/reader035/viewer/2022062518/56814211550346895dae18de/html5/thumbnails/13.jpg)
Possible peering parameters
• LOA • Attribute mapping• Economics• Liability• Privacy
![Page 14: From Authentication to Privilege Management to the Attribute Economy: Marketing runs amok…](https://reader035.vdocument.in/reader035/viewer/2022062518/56814211550346895dae18de/html5/thumbnails/14.jpg)
VOs plumbed to federations