SAML2: Privacy and security

No ratings

Presented at AUScert 2008 by

Nowadays, corporations and government agencies are wary of sharing data with their partners.The common thinking is, 'If you give them complete access to your data, any other access controls you may have in place become irrelevant'. Not so! We describe how organizations can enhance the functionality of the web-based services by using SAML2 to support both privacy and security requirements. We show (using a live demo!) how organisations may associate user data, without sharing confidential information directly, and deliver Web Single Sign-on as well!