Identity in the browser at 5. Lessons learned. Paul Trevithick - PowerPoint PPT Presentation

Jun 04, 2023 •220 likes •349 views

Identity in the browser at 5. Lessons learned. Paul Trevithick paul@azigo.com informationcard.net higgins-project.org Tuesday, May 24, 2011 Infocard in 60 seconds flat Tuesday, May 24, 2011 Click: Card picker window appears Tuesday, May 24,

Identity in the browser at 5. Lessons learned. Paul Trevithick paul@azigo.com informationcard.net higgins-project.org Tuesday, May 24, 2011
Infocard in 60 seconds flat Tuesday, May 24, 2011
Click: Card picker window appears Tuesday, May 24, 2011
User clicks on a card Tuesday, May 24, 2011
User authenticates to card/IdP Tuesday, May 24, 2011
Token is retrieved and HTTPS POST-ed to site Tuesday, May 24, 2011
Good & bad • We got it right from the start • We got it wrong at first but eventually got it right • We still haven’t got it right Tuesday, May 24, 2011
Capabilities • User-centric and decentralized architecture • Claims (attributes) not identifiers • Self-asserted and third-party asserted claims • Extensible schema • Claims as URIs • End-to-end crypto, audience restriction, verified claims • Separation of token format from network protocol • Browser-initiated (not SP-initiated) flow; anti-phishing protection • Passive advertisement of website policy • Privacy: minimal disclosure, pseudonym generation Tuesday, May 24, 2011
User Experience • Support for multiple identities (cards) • Automatic card matching & filtering (no more NASCAR) • Roaming support • Cross-browser, cross-platform (including mobile) • Unmodified browser support • Cross-protocol: should have invested more in building bridges • Finding the right balance • Transparency, notice & consent vs. usability • Performance vs. security Tuesday, May 24, 2011
User Experience • Dynamic claims (e.g. for payment use-cases) • Claims aggregation • Attribute/claim providers vs. identity providers Tuesday, May 24, 2011
Driving adoption • Put majority of resources on winning SPs/RPs (not IdPs) • Avoid having a single, dominant vendor in the ecosystem Tuesday, May 24, 2011

Download Presentation

Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

Lessons Learned Lessons Learned From From Lessons Learned Lessons Learned From From

Protg 2006, July 26th, Stanford I R I S A C 1 R E C Saint-Cyr Lessons Learned Lessons Learned From From Lessons Learned Lessons Learned From From Ontology Ontology Design Design Ontology Ontology Design Design Jean Andr B

371 views • 12 slides

The Nexus of Identity IBM's submission for the W3C Identity in the Browser Workshop by

The Nexus of Identity IBM's submission for the W3C Identity in the Browser Workshop by Maryann Hondo, Mary Ellen Zurko, Matthew Flaherty, Paula K. Austel, Sridhar Muppidi Net - net of the paper Our customers expect us to give them the

558 views • 9 slides

Identity in the Browser 2011 Michael Hanson, Dan Mills, Ben Adida A quick history - current and

Identity in the Browser 2011 Michael Hanson, Dan Mills, Ben Adida A quick history - current and proposed browser identity features Password store & sync Account Manager authentication and session metaprotocol Contacts API

483 views • 10 slides

Strong Authen,ca,on In and Beyond the Browser Lessons

Strong Authen,ca,on In and Beyond the Browser Lessons Learned from FIDO Brad Hill, PayPal, brad.hill@paypal.com Jeff Hodges, PayPal,

322 views • 8 slides

Identity in the Browser -or- Putting the Cart Before the Horse? Andy Steingruebl and Jeff

Identity in the Browser -or- Putting the Cart Before the Horse? Andy Steingruebl and Jeff Hodges {asteingruebl,jeff.hodges}@paypal.com PayPal Information Risk Management Position Paper for W3C Workshop on Identity in the Browser May 24

413 views • 9 slides

bringing change to life lessons learned at netflix & paypal Bill Scott VP, Consumer &

1.07k views • 68 slides

Institutionalizing Lessons Learned October 25, 2006 Loren Plisco Region II Background

Institutionalizing Lessons Learned October 25, 2006 Loren Plisco Region II Background SEP 2002 Davis-Besse Lessons Learned Task Force AUG 2004 - Effectiveness Review Lessons Learned Task Force JAN 2005 - EDO Charters

269 views • 22 slides

Contextual Access and Multi-Factor Authentication Lessons learned on getting past single-factor

Conference 2018 Contextual Access and Multi-Factor Authentication Lessons learned on getting past single-factor authentication! Panelists Corey Scholefield - Team Lead, Identity Services Wendy Blake Director, Network and Technical Services

519 views • 33 slides

OSHA Lessons Learned Adam Fries OSHA Compliance Officer February 13, 2018 OSHA Lessons Learned

OSHA Lessons Learned Adam Fries OSHA Compliance Officer February 13, 2018 OSHA Lessons Learned Jobsite Safety and Health Inspections/Audits better known as; PAPER WORK You hate it, Your safety director requires it, OSHA loves it, Does it

926 views • 35 slides

3/8/2019 Epidemiology, Risk Factors, and Outcomes of Pediatric PVD: LESSONS learned from the

3/8/2019 Epidemiology, Risk Factors, and Outcomes of Pediatric PVD: LESSONS learned from the Spanish Registry: Lessons Learned from the Registries o Is It possible (and worthy) to do a national registry? Lessons learned from the o

1.16k views • 43 slides

DEBUGGING LESSONS LEARNED WHILE DEBUGGING LESSONS LEARNED WHILE FIXING NETBSD FIXING NETBSD

DEBUGGING LESSONS LEARNED WHILE DEBUGGING LESSONS LEARNED WHILE FIXING NETBSD FIXING NETBSD ABOUT ME ABOUT ME maya@NetBSD.org coypu@sdf.org NetBSD/pkgsrc for the last 3 years THIS TALK THIS TALK Mix of a bunch of bugs Not solo work

695 views • 31 slides

Lessons Learned A Value Added Product of the Project Life Cycle R Gilman April 19, 2006 Agenda

Lessons Learned A Value Added Product of the Project Life Cycle R Gilman April 19, 2006 Agenda Introduction What are Lessons Learned? Value to the Project Process and Organization Keanes Approach to Lessons Learned Keys to

261 views • 24 slides

Four Major Events in Our History and the Lessons Learned Coleen Reiswig, Isobel McDonald, Ted

Four Major Events in Our History and the Lessons Learned Coleen Reiswig, Isobel McDonald, Ted Pincock, Carolyn Bouchard Joanne Archer Outline: 1) Common Themes 2) The Event and lessons learned: Spanish Influenza 1918 SARS

417 views • 38 slides

Lessons Learned from Japans NPL Experience Ladies and gentlemen, today I would like to discuss

Beijing International Finance Forum Chairman Junichi Ujiie 2004/05/19 Lessons Learned from Japans NPL Experience Ladies and gentlemen, today I would like to discuss the lessons to be learned from Japans NPL problems: first, the disposal

344 views • 3 slides

Some lessons learned from Team Science Some lessons learned from Team Science Lewis Cantley Weill

Some lessons learned from Team Science Some lessons learned from Team Science Lewis Cantley Weill Cornell Medical College, New York Presbyterian Hospital Past participation in Team Science Period Period Type of grant Type of grant Role in Grant

380 views • 20 slides

MDG-SDG TRANSITION IN IVORY COAST: LESSONS LEARNED AND IMPLICATIONS ON CURRENT PUBLIC POLICIES

MDG-SDG TRANSITION IN IVORY COAST: LESSONS LEARNED AND IMPLICATIONS ON CURRENT PUBLIC POLICIES SAKO G. . Oumar CONTENTS I. Context II. Assessment and lessons learned from implemention of MDGs III. Domestication/contextaulisation of SDGs

151 views • 12 slides

NASCAR Refueling Challenges: Connie Wang Outline Background Model Highlights Safety

NASCAR Refueling Challenges: Connie Wang Outline Background Model Highlights Safety and Efficiency Proof Highlights Conclusion The Strategy Behind a Pit Stop by Connie Wang Background NASCAR races 36 total races

300 views • 9 slides

IMPROVISATIONAL COMPUTATIONAL Lara J. Martin Brent Harrison STORYTELLING IN OPEN WORLDS Mark O.

IMPROVISATIONAL COMPUTATIONAL Lara J. Martin Brent Harrison STORYTELLING IN OPEN WORLDS Mark O. Riedl {lara.martin, brent.harrison, riedl} @cc.gatech.edu IMPROVISATIONAL 2 3 WHAT THE HECK DID WE JUST SEE? The American version of the

716 views • 35 slides

Board Leadership and Performance in a Crisis April 2020 Alex Madronal Private and Confidential

Board Leadership and Performance in a Crisis April 2020 Alex Madronal Private and Confidential Covid-19: A Test of Board Leadership Amid COVID-19s rapid spread across the globe, boards are moving fast to oversee the deployment or

602 views • 6 slides

THE NARRATIVE STRUCTURE OF LUKEACTS 1 The Gospel of Luke An Outline Prologue 1:1-4

Graduate Program in Pastoral Ministries PMIN 206 The Synoptic Gospels Dr. Catherine Murphy THE NARRATIVE STRUCTURE OF LUKEACTS 1 The Gospel of Luke An Outline Prologue 1:1-4 Infancy & Childhood Narrative 1:52:52 Preparation

331 views • 16 slides

Big Data/Big Brother Vinnie Monaco Assistant Professor Naval Postgraduate School 5 Feb 2020

Big Data/Big Brother Vinnie Monaco Assistant Professor Naval Postgraduate School 5 Feb 2020 The views in this presentation are those of the author and do not necessarily represent the views of the Department of the Navy, Department of

1.19k views • 32 slides

Advanced techniques for visualizing large, complex data

Advanced techniques for visualizing large, complex data Hands-on Sessions Thierry Carrard Cheng-Kai Chen CEA/DIF University of California, Davis Four

416 views • 23 slides

Intr oduc tion to the Blue Wate r s Pr oje c t Dr. William Kramer NCSA/University of

Intr oduc tion to the Blue Wate r s Pr oje c t Dr. William Kramer NCSA/University of Illinois Deputy Director of Blue Waters wkramer@ncsa.uiuc.edu/ - http://www.ncsa.uiuc.edu/BlueWaters (217) 333-6260/(217) 979-7577 Petascale computing

776 views • 42 slides

Visualising DMA Operations for Improved Parallel Performance Paul Keir Codeplay Software Ltd.

Visualising DMA Operations for Improved Parallel Performance Paul Keir Codeplay Software Ltd. Layout by orngjce223, CC-BY MMNet Workshop Heriot Watt, May 2013 Presentation Outline Introduction EU Framework 7 Project: LPGPU Offload C++ for

720 views • 31 slides