Information assurance in federated identity management: Experimentations and issues

Abstract

Identity management has been recently considered to be a viable solution for simplifying user management across enterprise applications. When users interact with services on the Internet, they often tailor the services in some way for their personal use through their personalized accounts and preferences. The network identity of each user is the global set of such attributes constituting the various accounts. In this paper, we investigate two well-known federated identity management (FIM) solutions, Microsoft Passport and Liberty Alliance, attempting to identify information assurance (IA) requirements in FIM. In particular, this paper focuses on principal IA requirements for Web Services that plays an integral role in enriching identity federation and management. We also discuss our experimental analysis of those models.