Difference between revisions of "Entity Statement"

Revision as of 21:26, 21 June 2019

A digital document that describes a digital Entity typically signed by a trusted issuer.

On the Identity Management page different roles are defined for Entities.

Note that some of these organizations are just associations of large Enterprises.

Name	Type	Category	Notes
AAMVA	Attribute	driver's license	just verifies information at state Identity providers
Better ID Coalition			Large US financial companies issued a Report
Center for Cybersecurity Policy
Distributed ID			One hundred point of identity
FIDO Alliance		UAF U2F	Fast ID Online 1.2 specs dtd 2017
Kantata Initiative	Federations	UMA	also Consent Receipt and IDEF
OAuth	AuthZ		Release under IETF
OpenID Foundation	AuthN+AuthZ	OpenID Connect	OpenID Foundation
SAML 2.0	AuthN	SAML2	OASIS-open.org original single sign on standard
TSCP			Transglobal Secure Collaboration Participation is a collaborative forum of worldwide stakeholders in the defense industry to address security issues
W3C Credential Community Group	Decentralized	eg Public Ledger	DID, verifiable claims sponsored by blockchain providers
Web AuthN	IAP or RP	aka FID02	released under W3C
Univ. of MD		Closed	IDEF registered, supports Internet2 SAML federation

@@ Line 5: / Line 5: @@
 On the [[Identity Management]] page different roles are defined for [[Entity|Entities]].
-==Providers==
+==Problems==
-The following table is the known authentication providers and some of their characteristics. Updates and corroboration are encouraged.
-*Category is "User" where user has complete control, "OpenID" for providers that require user permission to release information. The rest are closed in the sense that users have limited control over the release of their information. Some provide OpenID as an option when an alternate is shown.
-*Some sites are not authenticators, like CA (certificate authorities) or OAuth (authorization).
-*Many more sites exist, some are listed on the [http://openid.net/certification/ OpenID certification page]. Auth0 may offload all their AuthN to Google.
 ==Non-profits==