SlideShare a Scribd company logo

TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009

TrustBearer, profile picture
TrustBearer

The document discusses web authentication strategies presented by Brian Kelly at the Virginia Security Summit, focusing on identity management techniques such as SAML and OpenID. It highlights the importance of user identity vetting, account provisioning for employees and citizens, and the need for efficient support systems. Additionally, it outlines various end-point authentication options and stresses the benefits of using SAML for enterprise applications and OpenID for citizen web apps.

Technology
1 of 21
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009
TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009

More Related Content

PDF
TrustBearer - CTST 2009 - OpenID & Strong Authentication
TrustBearer
 
PPTX
Neumann 24727 B10.12 Update 20091029 AM R3
Agile Set, LLC
 
PDF
Mobile Cloud Identity
Mark Diodati
 
PDF
Two factor authentication-in_your_network_e_guide
Nick Owen
 
PDF
Smart Cards & Devices Forum 2012 - Securing Cloud Computing
OKsystem
 
PDF
Authentication.Next
Mark Diodati
 
PDF
今更聞けない電子認証入門 - OAuth 2.0/OIDCからFIDOまで -
Naoto Miyachi
 
PDF
Sp 29 two_factor_auth_guide
Hai Nguyen
 
TrustBearer - CTST 2009 - OpenID & Strong Authentication
TrustBearer
 
Neumann 24727 B10.12 Update 20091029 AM R3
Agile Set, LLC
 
Mobile Cloud Identity
Mark Diodati
 
Two factor authentication-in_your_network_e_guide
Nick Owen
 
Smart Cards & Devices Forum 2012 - Securing Cloud Computing
OKsystem
 
Authentication.Next
Mark Diodati
 
今更聞けない電子認証入門 - OAuth 2.0/OIDCからFIDOまで -
Naoto Miyachi
 
Sp 29 two_factor_auth_guide
Hai Nguyen
 

What's hot (20)

PPTX
Securing online services by combining smart cards and web-based applications
Olivier Potonniée
 
PDF
Session 7 e_raja_kailar
Hai Nguyen
 
PPTX
Smart Card Authentication
Dan Usher
 
PDF
Securing corporate assets_with_2_fa
Hai Nguyen
 
PDF
LINEのFIDO導入と将来展望
FIDO Alliance
 
PDF
OpenID Connect: The new standard for connecting to your Customers, Partners, ...
Salesforce Developers
 
PDF
Sign in with Apple
Nov Matake
 
PDF
OAuth 2.0 & OpenID Connect @ OpenSource Conference 2011 Tokyo #osc11tk
Nov Matake
 
PPT
US Security for Cyber Security
ArtanContracting
 
PPTX
Implementing MITREid - CIS 2014 Presentation
Justin Richer
 
PDF
Going beyond MFA(Multi-factor authentication)-Future demands much more
indragantiSaiHiranma
 
PPTX
Enabling Web Apps For DoD Security via PKI/CAC Enablement (Forge.Mil case study)
Richard Bullington-McGuire
 
PDF
2 factor authentication 3 [compatibility mode]
Hai Nguyen
 
PPTX
Why Assertion-based Access Token is preferred to Handle-based one?
Hitachi, Ltd. OSS Solution Center.
 
PDF
Securing a Web App with Security Keys
FIDO Alliance
 
PDF
WSO2 Guest Webinar: FIDO Universal Second Factor (U2F) for WSO2 Identity Server
WSO2
 
PDF
エンタープライズの視点からFIDOとFederationのビジネスを考える
Masaru Kurahayashi
 
PDF
FIDO UAF 1.0 Specs: Overview and Insights
FIDO Alliance
 
PDF
Securing a Web App with Passwordless Web Authentication
FIDO Alliance
 
PDF
CIS14: An Overview of FIDO’s Universal 2nd Factor (U2F) Specification
CloudIDSummit
 
Securing online services by combining smart cards and web-based applications
Olivier Potonniée
 
Session 7 e_raja_kailar
Hai Nguyen
 
Smart Card Authentication
Dan Usher
 
Securing corporate assets_with_2_fa
Hai Nguyen
 
LINEのFIDO導入と将来展望
FIDO Alliance
 
OpenID Connect: The new standard for connecting to your Customers, Partners, ...
Salesforce Developers
 
Sign in with Apple
Nov Matake
 
OAuth 2.0 & OpenID Connect @ OpenSource Conference 2011 Tokyo #osc11tk
Nov Matake
 
US Security for Cyber Security
ArtanContracting
 
Implementing MITREid - CIS 2014 Presentation
Justin Richer
 
Going beyond MFA(Multi-factor authentication)-Future demands much more
indragantiSaiHiranma
 
Enabling Web Apps For DoD Security via PKI/CAC Enablement (Forge.Mil case study)
Richard Bullington-McGuire
 
2 factor authentication 3 [compatibility mode]
Hai Nguyen
 
Why Assertion-based Access Token is preferred to Handle-based one?
Hitachi, Ltd. OSS Solution Center.
 
Securing a Web App with Security Keys
FIDO Alliance
 
WSO2 Guest Webinar: FIDO Universal Second Factor (U2F) for WSO2 Identity Server
WSO2
 
エンタープライズの視点からFIDOとFederationのビジネスを考える
Masaru Kurahayashi
 
FIDO UAF 1.0 Specs: Overview and Insights
FIDO Alliance
 
Securing a Web App with Passwordless Web Authentication
FIDO Alliance
 
CIS14: An Overview of FIDO’s Universal 2nd Factor (U2F) Specification
CloudIDSummit
 
Ad

Viewers also liked (14)

PDF
Strong Authentication in Web Application / ConFoo.ca 2011
Sylvain Maret
 
PPTX
Webinar - Easy multi factor authentication strategies and PCI DSS
onionid12
 
PDF
Strong Authentication in Web Applications: State of the Art 2011
Sylvain Maret
 
PPTX
Web authentication & authorization
Alexandru Pasaila
 
PPT
Authentication and strong authentication for Web Application
Sylvain Maret
 
PPT
Web authentication
Pradeep J V
 
PDF
The wonderful story of Web Authentication and Single-Sign On
Clément OUDOT
 
PPTX
SSL TSL;& SET
Ramesh Ogania
 
PDF
[JDLL 2016] OpenID Connect et FranceConnect
Clément OUDOT
 
PDF
Pmbok 4th edition chapter 11 - Project Risk Management
Ahmad Maharma, PMP,RMP
 
PPTX
PMP Training - 11 project risk management
ejlp12
 
PPTX
Implementing Enterprise Risk Management with ISO 31000:2009
Goutama Bachtiar
 
PPT
The Purpose And Goals Of Risk Management
Lisa Shannon, RN, BSN, JD.
 
PDF
Project Risk Management - PMBOK5
pankajsh10
 
Strong Authentication in Web Application / ConFoo.ca 2011
Sylvain Maret
 
Webinar - Easy multi factor authentication strategies and PCI DSS
onionid12
 
Strong Authentication in Web Applications: State of the Art 2011
Sylvain Maret
 
Web authentication & authorization
Alexandru Pasaila
 
Authentication and strong authentication for Web Application
Sylvain Maret
 
Web authentication
Pradeep J V
 
The wonderful story of Web Authentication and Single-Sign On
Clément OUDOT
 
SSL TSL;& SET
Ramesh Ogania
 
[JDLL 2016] OpenID Connect et FranceConnect
Clément OUDOT
 
Pmbok 4th edition chapter 11 - Project Risk Management
Ahmad Maharma, PMP,RMP
 
PMP Training - 11 project risk management
ejlp12
 
Implementing Enterprise Risk Management with ISO 31000:2009
Goutama Bachtiar
 
The Purpose And Goals Of Risk Management
Lisa Shannon, RN, BSN, JD.
 
Project Risk Management - PMBOK5
pankajsh10
 
Ad

Similar to TrustBearer - Virginia Security Summit - Web Authentication Strategies - April 2009 (20)

PPTX
Protecting Online Identities - MIX09
Jorgen Thelin
 
PPTX
Protecting Online Identities
goodfriday
 
PPTX
Protecting Online Identities
goodfriday
 
PPTX
kicking your enterprise security up a notch with adaptive authentication sa...
Sagara Gunathunga
 
PDF
Identiverse - Microservices Security
Bertrand Carlier
 
PDF
[WSO2Con EU 2018] Kicking Your Enterprise Security Up a Notch With Adaptive A...
WSO2
 
PPTX
TrialPay Security Tech Talk at Stanford ACM
hackingtrialpay
 
PDF
Federation Evolved: How Cloud, Mobile & APIs Change the Way We Broker Identity
CA API Management
 
PDF
APIdays London 2019 - Why the Financial Industry Needs Intelligent API Securi...
apidays
 
PPTX
Smart Identity for the Hybrid Multicloud World
Katherine Cola
 
PPTX
FrontOne our new and different solutions
frontone
 
PDF
PingYOU Future of Wallets_Darrell Geusz.pdf
havoc2003
 
PPTX
User Authentication for Government
Carahsoft
 
PPTX
Securing Microservices in Hybrid Cloud
VMware Tanzu
 
PDF
CIS13: Taking the Hyperspace Bypass: Controlling User Access to Other Worlds
CloudIDSummit
 
PPTX
Catalyst 2015: Patrick Harding
Ping Identity
 
PPTX
Ib final project
Manasi Deliwala
 
PDF
OAuth for QuickBooks Online REST Services
Intuit Developer
 
PDF
The Case For Next Generation IAM
Patrick Harding
 
PDF
Claim based authentaication
Sean Xiong
 
Protecting Online Identities - MIX09
Jorgen Thelin
 
Protecting Online Identities
goodfriday
 
Protecting Online Identities
goodfriday
 
kicking your enterprise security up a notch with adaptive authentication sa...
Sagara Gunathunga
 
Identiverse - Microservices Security
Bertrand Carlier
 
[WSO2Con EU 2018] Kicking Your Enterprise Security Up a Notch With Adaptive A...
WSO2
 
TrialPay Security Tech Talk at Stanford ACM
hackingtrialpay
 
Federation Evolved: How Cloud, Mobile & APIs Change the Way We Broker Identity
CA API Management
 
APIdays London 2019 - Why the Financial Industry Needs Intelligent API Securi...
apidays
 
Smart Identity for the Hybrid Multicloud World
Katherine Cola
 
FrontOne our new and different solutions
frontone
 
PingYOU Future of Wallets_Darrell Geusz.pdf
havoc2003
 
User Authentication for Government
Carahsoft
 
Securing Microservices in Hybrid Cloud
VMware Tanzu
 
CIS13: Taking the Hyperspace Bypass: Controlling User Access to Other Worlds
CloudIDSummit
 
Catalyst 2015: Patrick Harding
Ping Identity
 
Ib final project
Manasi Deliwala
 
OAuth for QuickBooks Online REST Services
Intuit Developer
 
The Case For Next Generation IAM
Patrick Harding
 
Claim based authentaication
Sean Xiong
 

Recently uploaded (20)

PPTX
PA Analog/Digital System: The Backbone of Modern Surveillance and Communication
AVTRON Technologies LLC
 
PPTX
Understanding_Digital_Forensics_Presentation.pptx
ImranKhan423233
 
PDF
Peak of Data & AI Encore- AI for Metadata and Smarter Workflows
Safe Software
 
PDF
Shreyas Phanse Resume: Experienced Backend Engineer | Java • Spring Boot • Ka...
SHREYAS PHANSE
 
PPTX
MYSQL Presentation for SQL database connectivity
Swati270511
 
PDF
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
Akar16
 
PDF
Encapsulation theory and applications.pdf
gurumoop
 
DOCX
The AUB Centre for AI in Media Proposal.docx
GAONE9
 
PDF
The Rise and Fall of 3GPP – Time for a Sabbatical?
3G4G
 
PDF
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
Jian-Hong Pan
 
PDF
Encapsulation_ Review paper, used for researhc scholars
gurumoop
 
PDF
Advanced methodologies resolving dimensionality complications for autism neur...
IAESIJAI
 
PDF
Chapter 3 Spatial Domain Image Processing.pdf
Getnet Tigabie Askale -(GM)
 
PDF
Building Integrated photovoltaic BIPV_UPV.pdf
SandeepSingh286037
 
PPTX
Detection-First SIEM: Rule Types, Dashboards, and Threat-Informed Strategy
ReZa AdineH
 
PPTX
Cloud computing and distributed systems.
kkkkkhan
 
PDF
Architecting across the Boundaries of two Complex Domains - Healthcare & Tech...
Peter Tan
 
PDF
Modernizing your data center with Dell and AMD
Principled Technologies
 
PPT
“AI and Expert System Decision Support & Business Intelligence Systems”
ZubinRadhakrishnan
 
PDF
Agricultural_Statistics_at_a_Glance_2022_0.pdf
SandeepSingh286037
 
PA Analog/Digital System: The Backbone of Modern Surveillance and Communication
AVTRON Technologies LLC
 
Understanding_Digital_Forensics_Presentation.pptx
ImranKhan423233
 
Peak of Data & AI Encore- AI for Metadata and Smarter Workflows
Safe Software
 
Shreyas Phanse Resume: Experienced Backend Engineer | Java • Spring Boot • Ka...
SHREYAS PHANSE
 
MYSQL Presentation for SQL database connectivity
Swati270511
 
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
Akar16
 
Encapsulation theory and applications.pdf
gurumoop
 
The AUB Centre for AI in Media Proposal.docx
GAONE9
 
The Rise and Fall of 3GPP – Time for a Sabbatical?
3G4G
 
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
Jian-Hong Pan
 
Encapsulation_ Review paper, used for researhc scholars
gurumoop
 
Advanced methodologies resolving dimensionality complications for autism neur...
IAESIJAI
 
Chapter 3 Spatial Domain Image Processing.pdf
Getnet Tigabie Askale -(GM)
 
Building Integrated photovoltaic BIPV_UPV.pdf
SandeepSingh286037
 
Detection-First SIEM: Rule Types, Dashboards, and Threat-Informed Strategy
ReZa AdineH
 
Cloud computing and distributed systems.
kkkkkhan
 
Architecting across the Boundaries of two Complex Domains - Healthcare & Tech...
Peter Tan
 
Modernizing your data center with Dell and AMD
Principled Technologies
 
“AI and Expert System Decision Support & Business Intelligence Systems”
ZubinRadhakrishnan
 
Agricultural_Statistics_at_a_Glance_2022_0.pdf
SandeepSingh286037