Entity Statement
From MgmtWiki
Revision as of 21:25, 21 June 2019 by Tom (talk | contribs) (Created page with "==Full Title or Meme== A digital document that describes a digital Entity typically signed by a trusted issuer. ==Context== On the Identity Management page different...")
Full Title or Meme
A digital document that describes a digital Entity typically signed by a trusted issuer.
Context
On the Identity Management page different roles are defined for Entities.
Providers
The following table is the known authentication providers and some of their characteristics. Updates and corroboration are encouraged.
- Category is "User" where user has complete control, "OpenID" for providers that require user permission to release information. The rest are closed in the sense that users have limited control over the release of their information. Some provide OpenID as an option when an alternate is shown.
- Some sites are not authenticators, like CA (certificate authorities) or OAuth (authorization).
- Many more sites exist, some are listed on the OpenID certification page. Auth0 may offload all their AuthN to Google.
Non-profits
Note that some of these organizations are just associations of large Enterprises.
| Name | Type | Category | Notes |
| AAMVA | Attribute | driver's license | just verifies information at state Identity providers |
| Better ID Coalition | Large US financial companies issued a Report | ||
| Center for Cybersecurity Policy | |||
| Distributed ID | One hundred point of identity | ||
| FIDO Alliance | UAF U2F | Fast ID Online 1.2 specs dtd 2017 | |
| Kantata Initiative | Federations | UMA | also Consent Receipt and IDEF |
| OAuth | AuthZ | Release under IETF | |
| OpenID Foundation | AuthN+AuthZ | OpenID Connect | OpenID Foundation |
| SAML 2.0 | AuthN | SAML2 | OASIS-open.org original single sign on standard |
| TSCP | Transglobal Secure Collaboration Participation is a collaborative forum of worldwide stakeholders in the defense industry to address security issues | ||
| W3C Credential Community Group | Decentralized | eg Public Ledger | DID, verifiable claims sponsored by blockchain providers |
| Web AuthN | IAP or RP | aka FID02 | released under W3C |
| Univ. of MD | Closed | IDEF registered, supports Internet2 SAML federation |