Entity Statement

From MgmtWiki
Revision as of 21:25, 21 June 2019 by Tom (talk | contribs) (Created page with "==Full Title or Meme== A digital document that describes a digital Entity typically signed by a trusted issuer. ==Context== On the Identity Management page different...")

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Full Title or Meme

A digital document that describes a digital Entity typically signed by a trusted issuer.

Context

On the Identity Management page different roles are defined for Entities.

Providers

The following table is the known authentication providers and some of their characteristics. Updates and corroboration are encouraged.

  • Category is "User" where user has complete control, "OpenID" for providers that require user permission to release information. The rest are closed in the sense that users have limited control over the release of their information. Some provide OpenID as an option when an alternate is shown.
  • Some sites are not authenticators, like CA (certificate authorities) or OAuth (authorization).
  • Many more sites exist, some are listed on the OpenID certification page. Auth0 may offload all their AuthN to Google.


Non-profits

Note that some of these organizations are just associations of large Enterprises.

Name Type Category Notes
AAMVA Attribute driver's license just verifies information at state Identity providers
Better ID Coalition Large US financial companies issued a Report
Center for Cybersecurity Policy
Distributed ID One hundred point of identity
FIDO Alliance UAF U2F Fast ID Online 1.2 specs dtd 2017
Kantata Initiative Federations UMA also Consent Receipt and IDEF
OAuth AuthZ Release under IETF
OpenID Foundation AuthN+AuthZ OpenID Connect OpenID Foundation
SAML 2.0 AuthN SAML2 OASIS-open.org original single sign on standard
TSCP Transglobal Secure Collaboration Participation is a collaborative forum of worldwide stakeholders in the defense industry to address security issues
W3C Credential Community Group Decentralized eg Public Ledger DID, verifiable claims sponsored by blockchain providers
Web AuthN IAP or RP aka FID02 released under W3C
Univ. of MD Closed IDEF registered, supports Internet2 SAML federation

References