Gluu EDU Webinar: Shibboleth/SAML SSO
•
1 like•2,106 views
Gluu is an InCommon Affiliate and a sponsor of the Shibboleth foundation. In this webinar, Gluu CEO Mike Schwartz demonstrated how the Gluu EDU Server can simplify certificate management and provide an easy framework for creating Shibbolth/SAML SSO with InCommon sponsored partners.
Report
Share
Report
Share
Download to read offline
Recommended
Benefit of Web Application Development with Zend Framework
Zend is a one of most powerful, opensource & object Oriented website Development framework. Check out Benefit of Zend Framework website Development with Brainnvire's skilled team of Developers.
See more : http://www.brainvire.com/zend-framework-development/
CILogon & SciTokens: OIDC/OAuth Federation
CILogon & SciTokens: OIDC/OAuth Federation presentation at the January 2018 EUGridPMA meeting https://indico.nikhef.nl/event/1076/
LASCON: Three Profiels of OAuth2 for Identity and Access Management
OAuth2, OpenID Connect and UMA: three technologies that can be used by organizations to control access to resources in the enterprise. I used these slides as a jumping point for a conversation at LASCON, a content rich conference sponsored by OWASP in Austin, TX.
First o auth 2.0 and saml identity federation platform to be shown by gluu
Gluu will demonstrate for the first time its consolidated interface for SAML and OAuth2 federation. The interface combines SAML 2.0 and OAuth2 to enable institutions to prepare for new identity standards like OpenID Connect and UMA that better support cloud, mobile, and social applications. Gluu aims to educate university IT staff on using its cloud identity service to simplify managing organizational SAML identity providers.
Identity Federation for the Enterprise: Lessons Learned
Talk on Identity Federation: Lessons from the Trenches presented at the EEMA conference, London, June 9th 2010. Zach Sachen and I share our experiences on implementing a full fledged ID Federation solution.
How information security empowers mobile innovation v3 branded
This document discusses how mobile technology is enabling innovation through providing services like agricultural information, online doctor access, and improved pharmaceutical sales. However, it also notes that mobile introduces information security risks like data loss and malware. The document outlines trends like growing smartphone adoption, mobile traffic increases, and mobile app usage that are driving further innovation. It argues that security must be an enabler of mobile services given issues of device diversity, advanced threats, and data explosion from increased mobility. A variety of security controls like device restrictions and mobile security strategies are being used to mitigate smartphone and tablet risks.
Trust Elevation: Implementing an OAuth2 Infrastructure using OpenID Connect &...
Trust elevation allows increasing authentication strength to enable higher-risk transactions. It involves tradeoffs between security and usability. OAuth2 and OpenID Connect provide standard authentication frameworks for apps and APIs, supporting a range of authentication methods from passwords to biometrics. User managed access (UMA) further extends OAuth2 to implement policy-based access control. To enable cross-domain trust elevation, organizations can participate in federated identity systems like SAML and OAuth2 federations, which standardize technical and legal integration between identity providers. Emerging areas involve authentication for IoT devices and fine-grained access control over distributed data.
Kantara OTTO slides
Open Trust Taxonomy for Federation Operators - if you are interested in new technologies to enable trust across multiple domains, you should consider joining the OTTO WG at Kantara. These slides are a quick overview of the work, with links to enable you to find out more. Mutli-party Federations help drive down the legal and techincal cost of SSO and collaboration for technologies like SAML, OAuth, and PKI. It's a trust model that makes sense when you have a reasonably sized ecosystem--not millions, but thousands.
Recommended
Benefit of Web Application Development with Zend Framework
Zend is a one of most powerful, opensource & object Oriented website Development framework. Check out Benefit of Zend Framework website Development with Brainnvire's skilled team of Developers.
See more : http://www.brainvire.com/zend-framework-development/
CILogon & SciTokens: OIDC/OAuth Federation
CILogon & SciTokens: OIDC/OAuth Federation presentation at the January 2018 EUGridPMA meeting https://indico.nikhef.nl/event/1076/
LASCON: Three Profiels of OAuth2 for Identity and Access Management
OAuth2, OpenID Connect and UMA: three technologies that can be used by organizations to control access to resources in the enterprise. I used these slides as a jumping point for a conversation at LASCON, a content rich conference sponsored by OWASP in Austin, TX.
First o auth 2.0 and saml identity federation platform to be shown by gluu
Gluu will demonstrate for the first time its consolidated interface for SAML and OAuth2 federation. The interface combines SAML 2.0 and OAuth2 to enable institutions to prepare for new identity standards like OpenID Connect and UMA that better support cloud, mobile, and social applications. Gluu aims to educate university IT staff on using its cloud identity service to simplify managing organizational SAML identity providers.
Identity Federation for the Enterprise: Lessons Learned
Talk on Identity Federation: Lessons from the Trenches presented at the EEMA conference, London, June 9th 2010. Zach Sachen and I share our experiences on implementing a full fledged ID Federation solution.
How information security empowers mobile innovation v3 branded
This document discusses how mobile technology is enabling innovation through providing services like agricultural information, online doctor access, and improved pharmaceutical sales. However, it also notes that mobile introduces information security risks like data loss and malware. The document outlines trends like growing smartphone adoption, mobile traffic increases, and mobile app usage that are driving further innovation. It argues that security must be an enabler of mobile services given issues of device diversity, advanced threats, and data explosion from increased mobility. A variety of security controls like device restrictions and mobile security strategies are being used to mitigate smartphone and tablet risks.
Trust Elevation: Implementing an OAuth2 Infrastructure using OpenID Connect &...
Trust elevation allows increasing authentication strength to enable higher-risk transactions. It involves tradeoffs between security and usability. OAuth2 and OpenID Connect provide standard authentication frameworks for apps and APIs, supporting a range of authentication methods from passwords to biometrics. User managed access (UMA) further extends OAuth2 to implement policy-based access control. To enable cross-domain trust elevation, organizations can participate in federated identity systems like SAML and OAuth2 federations, which standardize technical and legal integration between identity providers. Emerging areas involve authentication for IoT devices and fine-grained access control over distributed data.
Kantara OTTO slides
Open Trust Taxonomy for Federation Operators - if you are interested in new technologies to enable trust across multiple domains, you should consider joining the OTTO WG at Kantara. These slides are a quick overview of the work, with links to enable you to find out more. Mutli-party Federations help drive down the legal and techincal cost of SSO and collaboration for technologies like SAML, OAuth, and PKI. It's a trust model that makes sense when you have a reasonably sized ecosystem--not millions, but thousands.
Dev ops in the Digital Repository of Ireland - Stuart Kenny
The Digital Repository of Ireland (DRI) is a digital repository funded by the Irish government to provide long-term access to digital resources from Irish institutions. It uses DevOps practices like continuous integration, virtualization, and Ansible for deployment to develop its open-source Hydra repository solution on OpenNebula cloud infrastructure. Stakeholder requirements were mapped to automated tests to guide development of the multi-institutional repository for multiple data types and access controls.
1 architecture & design
This document summarizes a webinar on MySQL architecture and design. The webinar covered causes and impacts of downtime, how to select the right high availability solution based on requirements, an overview of MySQL high availability solutions including replication, clustering, and third party options, and operational best practices. It also discussed new features in MySQL 5.6 that improve replication performance, failover, recovery, data integrity, and manageability.
Webinar: Overcoming the Five Distributed Data Protection Challenges
This webinar discusses the challenges of protecting distributed data across remote and branch offices. The five key challenges are lack of visibility, limited expertise, manual processes, budget constraints, and regional data privacy rules. Traditionally, organizations have tried to centralize backups or leave protection distributed. However, these approaches can result in data sprawl, compliance issues, and complexity. The webinar argues cloud backup is a better option, as it can provide a single solution for all sites while addressing costs and regulations. Examples are given of companies improving protection, compliance, and reducing costs by switching to a cloud-based data protection platform.
10 tips for continuous integration
Presented: Fri, 17 Nov 2017, DrupalSouth Auckland
Presented by: Vladimir Roudakov
Link: https://drupalsouth2017.drupal.org.nz/session/10-tips-continuous-integration
DESCRIPTION
=====
Continuous Integration is used on almost any new project. This session aimed at everyone who want to understand what Continuous Integration actually means.
This session will cover the following topics:
- What is Continuous Integration?
- Continuous Integration applications
- Common continuous integration services and providers
- Real life example of using CI in Drupal projects
Should I attend this session?
- What is Continuous Integration (CI)?
- Where and why would I need to use CI?
If you are looking for answer to the above questions, this session is for you.
=====
Easy Microservices with JHipster - Devoxx BE 2017
10,000 microservices are generated each month using JHipster!
During this in-depth session by the two JHipster lead developers, we’ll detail:
How to develop and deploy microservices easily
Scalability and failover of microservices
The JHipster Registry for scaling, configuring and monitoring microservices
Common architecture patterns and pitfalls
Devoxx Belgium 2017 - easy microservices with JHipster
Slides from the "easy microservices with JHipster" session by Julien Dubois and Deepu K Sasidharan at Devoxx Belgium 2017
Introduction to active_directory
The document provides an overview of Active Directory, including what it is and is not, the tools used to manage it, authentication and authorization concepts, management concepts like organizational units and group policy, and additional Microsoft services that integrate with Active Directory like Windows Server Update Services and Distributed File System. The presentation covers the basics of Active Directory, its core functions of authentication, authorization, and centralized management, and how it is based on LDAP to store directory information that can be accessed remotely.
Drupal for Project Managers, Part 3: Launching
This document discusses deployment and launch of a Drupal project. It covers planning for launch including testing, load testing, and cutover plans. Risks in deployment like code, data, and file conflicts are examined. Maintaining separate development, staging, and production environments is advised. Exporting configurations to code is suggested to avoid rebuilding sites. Hosting considerations like performance, scalability and optimizations are also addressed.
Drupal for Enterprises
This document discusses how several prominent organizations such as MIT, Harvard, the White House, and The Economist use Drupal. It provides examples of how these organizations built websites, communities, and tools using Drupal. It also outlines the benefits of using Drupal, such as flexibility, robustness, and integration with other systems. Finally, it discusses potential use cases for an educational institution to implement Drupal.
Kscope Not Your Father's Enterprise Manager
History of Enterprise Manager and session on how to effectively monitor and new release features in 12.1.0.4
Webinar: Designing a Storage Consolidation Strategy for Today, the Future and...
Most storage consolidation strategies fail because they attempt to consolidate to a single piece of storage hardware. To successfully consolidate storage, IT professionals need to look at consolidation strategies that worked. Server consolidation was VMware’s first use case. It was successful because instead of consolidating hardware, VMware consolidated the environment under a single hypervisor (ESXi) and console (vCenter) but still provided organizations with hardware flexibility. A successful storage consolidation strategy needs to follow a similar formula by providing a single software solution that controls a variety of storage hardware, but that software also has to extract maximum performance and value from each hardware platform on which it sits.
Join Storage Switzerland and StorOne in which we discuss how to design a storage consolidation strategy for today, the future and the cloud.
The Future of GlusterFS and Gluster.org
These are the slides from a webinar I did today (Jan 26, 2012). It's all about where the GlusterFS project stands today and where it's going.
VMworld 2013: vCloud Hybrid Service Jump Start Part Four of Five: Identifying...
VMworld 2013
Greg Herzog, VMware
Learn more about VMworld and register at http://www.vmworld.com/index.jspa?src=socmed-vmworld-slideshare
Multiplier Effect: Case Studies in Distributions for Publishers
Join members from both Four Kitchens and Meredith Agrimedia as they discuss the experience of migration and relaunch of the digital presence of two magazines: Successful Farming at Agriculture.com and WOOD Magazine at woodmagazine.com.
We'll start by discussing the scope of the projects, delve into the commonalities and differences, explore their common advertising and analytics implementation, and analyze the unified distribution that supports both brands. By developing the infrastructure simultaneously, brand-agnostic functionality became a priority which in turn created a more modular and flexible system that facilitated open-sourcing and cross-organizational sharing. Thanks to the codebase approach and experience, the first site took about 6 months and the second took less than 6 weeks.
Postgres Plus Cloud Database Presentation
Are you thinking about a Postgres Plus Cloud Database and don’t know where to begin? Review these slides learn the benefits of a Cloud Database GUI and its ease of use. Visit EnterpriseDB.com > Resources > Webcasts to see the webinar recording.
DDN Strategic Vision Tour June 2015
In this deck, Molly Rector from DDN describes the company’s vision for high performance data storage.
Learn more: http://ddn.com
Watch the video presentation: http://insidehpc.com/2015/06/slidecast-ddn-strategic-vision-for-high-performance-storage/
Flex Modular Development and Mate
This document discusses modular development in Flex using the Mate framework. It introduces common issues with large Flex applications, how modules can help address these issues, and provides an overview of the basics of the Mate framework. Mate uses inversion of control and dependency injection to promote a presentation pattern, making applications easier to maintain and extend through separation of concerns and loose coupling between components. The document outlines some of Mate's core features like the event map, property injection, and presentation model pattern.
The Truth About All-Flash Array Deduplication
This document summarizes a webinar on all-flash deduplication. It discusses what deduplication is, why it is valuable for all-flash storage, and potential challenges implementing deduplication on all-flash systems. The webinar will explore how to overcome these challenges and compare different solutions' performance, scalability, data reduction rates, and other features. Attendees can ask questions during or after by registering for the on-demand recording.
SODA Framework Projects 25 Sep 2022 v1.pptx
The document introduces several open source SODA Foundation projects - Delfin for storage monitoring, Strato for multicloud data management, Kahu for container data protection, and Como for unstructured data management. It provides overview descriptions and use cases for each project, along with links to their GitHub repositories and instructions for how to join the relevant Slack channel to contribute. The goal of these projects is to provide tools for unified, intelligent data management from edge to core to cloud using the SODA open data framework.
Con9024 next generation optimized directory - oracle unified directory - final
The document provides an overview of Oracle Unified Directory (OUD). It discusses key drivers for identity management like mobility, cloud, social media, and the internet of things. It then introduces OUD as the next generation optimized directory that can scale to billions of entries with 3x higher performance than previous solutions. OUD is fully compatible and interoperable with other directories. The document outlines new capabilities in OUD 11gR2 like improved performance, security, and support for additional platforms. Finally, it shares examples of customers that have adopted OUD to modernize from older directories or open source solutions.
LASCON 2017: SAML v. OpenID v. Oauth
How do SAML, OpenID Connect and OAuth compare? How are they similar? Different? When do you use one or the other? For more info, also see my blog: http://gluu.co/oauth-saml-openid
OTTO - Internet2 TechX 2017
OTTO = Open Trust Taxonomy for Federation Operators
It's an API and JSON-LD protocol to enhance interoperability between identity federation participants and hosting providers.
More Related Content
Similar to Gluu EDU Webinar: Shibboleth/SAML SSO
Dev ops in the Digital Repository of Ireland - Stuart Kenny
The Digital Repository of Ireland (DRI) is a digital repository funded by the Irish government to provide long-term access to digital resources from Irish institutions. It uses DevOps practices like continuous integration, virtualization, and Ansible for deployment to develop its open-source Hydra repository solution on OpenNebula cloud infrastructure. Stakeholder requirements were mapped to automated tests to guide development of the multi-institutional repository for multiple data types and access controls.
1 architecture & design
This document summarizes a webinar on MySQL architecture and design. The webinar covered causes and impacts of downtime, how to select the right high availability solution based on requirements, an overview of MySQL high availability solutions including replication, clustering, and third party options, and operational best practices. It also discussed new features in MySQL 5.6 that improve replication performance, failover, recovery, data integrity, and manageability.
Webinar: Overcoming the Five Distributed Data Protection Challenges
This webinar discusses the challenges of protecting distributed data across remote and branch offices. The five key challenges are lack of visibility, limited expertise, manual processes, budget constraints, and regional data privacy rules. Traditionally, organizations have tried to centralize backups or leave protection distributed. However, these approaches can result in data sprawl, compliance issues, and complexity. The webinar argues cloud backup is a better option, as it can provide a single solution for all sites while addressing costs and regulations. Examples are given of companies improving protection, compliance, and reducing costs by switching to a cloud-based data protection platform.
10 tips for continuous integration
Presented: Fri, 17 Nov 2017, DrupalSouth Auckland
Presented by: Vladimir Roudakov
Link: https://drupalsouth2017.drupal.org.nz/session/10-tips-continuous-integration
DESCRIPTION
=====
Continuous Integration is used on almost any new project. This session aimed at everyone who want to understand what Continuous Integration actually means.
This session will cover the following topics:
- What is Continuous Integration?
- Continuous Integration applications
- Common continuous integration services and providers
- Real life example of using CI in Drupal projects
Should I attend this session?
- What is Continuous Integration (CI)?
- Where and why would I need to use CI?
If you are looking for answer to the above questions, this session is for you.
=====
Easy Microservices with JHipster - Devoxx BE 2017
10,000 microservices are generated each month using JHipster!
During this in-depth session by the two JHipster lead developers, we’ll detail:
How to develop and deploy microservices easily
Scalability and failover of microservices
The JHipster Registry for scaling, configuring and monitoring microservices
Common architecture patterns and pitfalls
Devoxx Belgium 2017 - easy microservices with JHipster
Slides from the "easy microservices with JHipster" session by Julien Dubois and Deepu K Sasidharan at Devoxx Belgium 2017
Introduction to active_directory
The document provides an overview of Active Directory, including what it is and is not, the tools used to manage it, authentication and authorization concepts, management concepts like organizational units and group policy, and additional Microsoft services that integrate with Active Directory like Windows Server Update Services and Distributed File System. The presentation covers the basics of Active Directory, its core functions of authentication, authorization, and centralized management, and how it is based on LDAP to store directory information that can be accessed remotely.
Drupal for Project Managers, Part 3: Launching
This document discusses deployment and launch of a Drupal project. It covers planning for launch including testing, load testing, and cutover plans. Risks in deployment like code, data, and file conflicts are examined. Maintaining separate development, staging, and production environments is advised. Exporting configurations to code is suggested to avoid rebuilding sites. Hosting considerations like performance, scalability and optimizations are also addressed.
Drupal for Enterprises
This document discusses how several prominent organizations such as MIT, Harvard, the White House, and The Economist use Drupal. It provides examples of how these organizations built websites, communities, and tools using Drupal. It also outlines the benefits of using Drupal, such as flexibility, robustness, and integration with other systems. Finally, it discusses potential use cases for an educational institution to implement Drupal.
Kscope Not Your Father's Enterprise Manager
History of Enterprise Manager and session on how to effectively monitor and new release features in 12.1.0.4
Webinar: Designing a Storage Consolidation Strategy for Today, the Future and...
Most storage consolidation strategies fail because they attempt to consolidate to a single piece of storage hardware. To successfully consolidate storage, IT professionals need to look at consolidation strategies that worked. Server consolidation was VMware’s first use case. It was successful because instead of consolidating hardware, VMware consolidated the environment under a single hypervisor (ESXi) and console (vCenter) but still provided organizations with hardware flexibility. A successful storage consolidation strategy needs to follow a similar formula by providing a single software solution that controls a variety of storage hardware, but that software also has to extract maximum performance and value from each hardware platform on which it sits.
Join Storage Switzerland and StorOne in which we discuss how to design a storage consolidation strategy for today, the future and the cloud.
The Future of GlusterFS and Gluster.org
These are the slides from a webinar I did today (Jan 26, 2012). It's all about where the GlusterFS project stands today and where it's going.
VMworld 2013: vCloud Hybrid Service Jump Start Part Four of Five: Identifying...
VMworld 2013
Greg Herzog, VMware
Learn more about VMworld and register at http://www.vmworld.com/index.jspa?src=socmed-vmworld-slideshare
Multiplier Effect: Case Studies in Distributions for Publishers
Join members from both Four Kitchens and Meredith Agrimedia as they discuss the experience of migration and relaunch of the digital presence of two magazines: Successful Farming at Agriculture.com and WOOD Magazine at woodmagazine.com.
We'll start by discussing the scope of the projects, delve into the commonalities and differences, explore their common advertising and analytics implementation, and analyze the unified distribution that supports both brands. By developing the infrastructure simultaneously, brand-agnostic functionality became a priority which in turn created a more modular and flexible system that facilitated open-sourcing and cross-organizational sharing. Thanks to the codebase approach and experience, the first site took about 6 months and the second took less than 6 weeks.
Postgres Plus Cloud Database Presentation
Are you thinking about a Postgres Plus Cloud Database and don’t know where to begin? Review these slides learn the benefits of a Cloud Database GUI and its ease of use. Visit EnterpriseDB.com > Resources > Webcasts to see the webinar recording.
DDN Strategic Vision Tour June 2015
In this deck, Molly Rector from DDN describes the company’s vision for high performance data storage.
Learn more: http://ddn.com
Watch the video presentation: http://insidehpc.com/2015/06/slidecast-ddn-strategic-vision-for-high-performance-storage/
Flex Modular Development and Mate
This document discusses modular development in Flex using the Mate framework. It introduces common issues with large Flex applications, how modules can help address these issues, and provides an overview of the basics of the Mate framework. Mate uses inversion of control and dependency injection to promote a presentation pattern, making applications easier to maintain and extend through separation of concerns and loose coupling between components. The document outlines some of Mate's core features like the event map, property injection, and presentation model pattern.
The Truth About All-Flash Array Deduplication
This document summarizes a webinar on all-flash deduplication. It discusses what deduplication is, why it is valuable for all-flash storage, and potential challenges implementing deduplication on all-flash systems. The webinar will explore how to overcome these challenges and compare different solutions' performance, scalability, data reduction rates, and other features. Attendees can ask questions during or after by registering for the on-demand recording.
SODA Framework Projects 25 Sep 2022 v1.pptx
The document introduces several open source SODA Foundation projects - Delfin for storage monitoring, Strato for multicloud data management, Kahu for container data protection, and Como for unstructured data management. It provides overview descriptions and use cases for each project, along with links to their GitHub repositories and instructions for how to join the relevant Slack channel to contribute. The goal of these projects is to provide tools for unified, intelligent data management from edge to core to cloud using the SODA open data framework.
Con9024 next generation optimized directory - oracle unified directory - final
The document provides an overview of Oracle Unified Directory (OUD). It discusses key drivers for identity management like mobility, cloud, social media, and the internet of things. It then introduces OUD as the next generation optimized directory that can scale to billions of entries with 3x higher performance than previous solutions. OUD is fully compatible and interoperable with other directories. The document outlines new capabilities in OUD 11gR2 like improved performance, security, and support for additional platforms. Finally, it shares examples of customers that have adopted OUD to modernize from older directories or open source solutions.
Similar to Gluu EDU Webinar: Shibboleth/SAML SSO (20)
Dev ops in the Digital Repository of Ireland - Stuart Kenny
Dev ops in the Digital Repository of Ireland - Stuart Kenny
Webinar: Overcoming the Five Distributed Data Protection Challenges
Webinar: Overcoming the Five Distributed Data Protection Challenges
Devoxx Belgium 2017 - easy microservices with JHipster
Devoxx Belgium 2017 - easy microservices with JHipster
Webinar: Designing a Storage Consolidation Strategy for Today, the Future and...
Webinar: Designing a Storage Consolidation Strategy for Today, the Future and...
VMworld 2013: vCloud Hybrid Service Jump Start Part Four of Five: Identifying...
VMworld 2013: vCloud Hybrid Service Jump Start Part Four of Five: Identifying...
Multiplier Effect: Case Studies in Distributions for Publishers
Multiplier Effect: Case Studies in Distributions for Publishers
Con9024 next generation optimized directory - oracle unified directory - final
Con9024 next generation optimized directory - oracle unified directory - final
More from Mike Schwartz
LASCON 2017: SAML v. OpenID v. Oauth
How do SAML, OpenID Connect and OAuth compare? How are they similar? Different? When do you use one or the other? For more info, also see my blog: http://gluu.co/oauth-saml-openid
OTTO - Internet2 TechX 2017
OTTO = Open Trust Taxonomy for Federation Operators
It's an API and JSON-LD protocol to enhance interoperability between identity federation participants and hosting providers.
The Client is not always right! How to secure OAuth authentication from your...
The OpenID Connect or OAuth frameworks can be used to achieve a range of security levels. Properly used, it mitigates many risks. However, OpenID Connect’s flexibility, combined with its shared ontogeny with OAuth 2.0, creates opportunities for error--developers may not use (or even know about ) certain features necessary to achieve the transaction integrity they desire. The good news is that client software and middleware services can do some of the heavy lifting. You can have the best of both worlds--maximizing security and developer joy. Whether you’re a developer or security architect, what should you look for in an application that acts as an OpenID Connect client?
RSA Conference 2016: Don't Use Two-Factor Authentication... Unless You Need It!
Sometimes you need to be more sure your are connected to the right person. In those cases, to mitigate the risk of identity fraud, you should consider using a technique called trust elevation. Its easy with the OAuth2 profiles: OpenID Connect and UMA.
RSA Conference 2016: Who Are You? From Meat to Electrons and Back Again
Authentication technologies are intersecting science fiction and comedy. A flyby of recently discovered and invented mechanisms to digitally identify a person makes it clear that it’s not for lack of options. If the usability and security of strong authentication have been solved, how can we improve deployability, which is the main reason we are still using passwords?
This presentation was delivered by Mike Schwartz at RSA Conference 2016.
OAuth2 for IoT Security: Why OpenID Connect & UMA Are They Key
This document discusses OAuth2 profiles like OpenID Connect and UMA and why they should be adopted for IoT. OpenID Connect provides identity while UMA provides access control. Both standards have been in development for 10 years based on prior experience. They are a perfect fit for IoT use cases as they standardize interfaces without assuming cloud, are proven usable by developers, are small, scale well, and have industry consensus with Google and Microsoft supporting OpenID Connect. UMA 1.0 will be announced in April 2015.
Who Are You? From Meat to Electrons - SXSW 2014
It’s an age old problem: how do you prove your identity? It’s the reason governments started issuing id cards. Since the advent of the Internet, identification has gotten even harder. To a website, you are a stream of electrons. Before you can transact business, the website needs to associate that stream of electrons with a person--a piece of meat. 80% of the Internet's security breaches have been traced back to bad passwords, but until recently, anything better than passwords meant expensive hardware tokens, or complex digital certificates. Luckily, authentication is experiencing a renaissance. New technologies have made it easier, more secure, and even less expensive to authenticate a person. Authentication is the front door to your network service. What device does the person have in their hands? Is your website or mobile app for customers or employees?
The slides from this SXSW 2014 presentation will help you understand your options, and how to use authentication for competitive advantage.
OpenID Connect vs. OpenID 1 & 2
OpenID Connect is the newest iteration of the OpenID Internet authentication standard that’s been developed in coordination by Google, Facebook, Microsoft and others at the OpenID Foundation.
OpenID Connect performs many of the same tasks as OpenID 1 & 2, but does so in a way that is API-friendly, and usable by native and mobile applications.
OpenID 1 and 2 lend part of their name, but Connect is a complete re-write that is fundamentally better architected for the modern web in a few important ways.
ID Next 2013 Keynote Slides by Mike Schwartz
Slide deck from Mike Schwartz's keynote address at ID Next 2013 in The Hague, Netherlands. His speech discussed what tools and rules are needed for scaling federations to include networks of trusted Identity Providers (IDP's) and Service Providers (SP's).
Federation registry
This document discusses how a multi-party federation approach can help states support numerous applications that want to use their open interfaces for authentication and authorization. It explains that federations provide tools and rules to protect privacy while lowering costs for states and developers. Federations are proven in higher education and government. To be successful, federations must ease the onboarding process through registration, vetting, and collecting fees. The participation agreement specifies privacy protections around identity assurance, data protection levels, and user control. The federation publishes schemas for user attributes, authentication mechanisms, and authorization scopes. It also publishes daily metadata files listing participants. The Gluu Federation Registry provides administration and supports the approval workflow. Its subscription includes deployment, participation agreement custom
Single Sign On 101
These slides are supposed to help you understand the basics of application security, and how the latest technologies come together to enable you to reduce the number of times people at your organization need to authenticate.
For more information visit. http://gluu.org
Requirements for Personal Clouds : Tech Ranch Talk 8/7/13
This document discusses internet requirements for personal clouds, including standards for authentication, authorization, and data federation. It compares OpenID Connect to OpenID 2.0, noting improvements in OpenID Connect like support for mobile clients, email identifiers, and endpoints for user claims. UMA is mentioned for authorization. Graph models are discussed for representing data structures for federation, with the OpenID Graph model using nodes and arcs to represent statements about subjects, predicates, and objects.
Cloud Identity: A Recipe for Higher Education
The concept of cloud identity in higher education was recognized in November 2009 with the EDUCAUSE Catalyst Award, which honors IT-based innovations that provide groundbreaking solutions to major challenges in higher education.
But what is cloud identity?
The gist is that cloud identity enables a person's "user" information to be distributed on the Internet. This solves a common problem: the need to maintain a username at every website. In this paradigm shift, identity information is not stored within each website, but accessed on the wire as needed. Websites become "relying parties" (RPs) using the information of trusted "identity providers" (IdPs). Although it has taken a while, finally the recipe for federated identity seems clear.
RSA Europe: Future of Cloud Identity
A slideshow on the future of Identity in the cloud, with openid connect fueling data sharing, federation, and security.
SAML Protocol Overview
This document provides an overview of the Security Assertion Markup Language (SAML) protocol. SAML allows sites to exchange user authentication, authorization, and attribute information via XML messages. It enables single sign-on, single logout, and attribute sharing across applications. SAML 2.0 uses standards like XML, HTTP, and SOAP to standardize single sign-on across enterprise cloud apps. It works by exchanging assertions about users via protocols and bindings to authenticate users among sites. Benefits include centralized identity control and single sign-on without exposing passwords.
More from Mike Schwartz (15)
The Client is not always right! How to secure OAuth authentication from your...
The Client is not always right! How to secure OAuth authentication from your...
RSA Conference 2016: Don't Use Two-Factor Authentication... Unless You Need It!
RSA Conference 2016: Don't Use Two-Factor Authentication... Unless You Need It!
RSA Conference 2016: Who Are You? From Meat to Electrons and Back Again
RSA Conference 2016: Who Are You? From Meat to Electrons and Back Again
OAuth2 for IoT Security: Why OpenID Connect & UMA Are They Key
OAuth2 for IoT Security: Why OpenID Connect & UMA Are They Key
Requirements for Personal Clouds : Tech Ranch Talk 8/7/13
Requirements for Personal Clouds : Tech Ranch Talk 8/7/13
Recently uploaded
Trusted Execution Environment for Decentralized Process Mining
Presentation of the paper "Trusted Execution Environment for Decentralized Process Mining" given during the CAiSE 2024 Conference in Cyprus on June 7, 2024.
dbms calicut university B. sc Cs 4th sem.pdf
Its a seminar ppt on database management system using sql
Nunit vs XUnit vs MSTest Differences Between These Unit Testing Frameworks.pdf
When it comes to unit testing in the .NET ecosystem, developers have a wide range of options available. Among the most popular choices are NUnit, XUnit, and MSTest. These unit testing frameworks provide essential tools and features to help ensure the quality and reliability of code. However, understanding the differences between these frameworks is crucial for selecting the most suitable one for your projects.
Fueling AI with Great Data with Airbyte Webinar
This talk will focus on how to collect data from a variety of sources, leveraging this data for RAG and other GenAI use cases, and finally charting your course to productionalization.
Driving Business Innovation: Latest Generative AI Advancements & Success Story
Are you ready to revolutionize how you handle data? Join us for a webinar where we’ll bring you up to speed with the latest advancements in Generative AI technology and discover how leveraging FME with tools from giants like Google Gemini, Amazon, and Microsoft OpenAI can supercharge your workflow efficiency.
During the hour, we’ll take you through:
Guest Speaker Segment with Hannah Barrington: Dive into the world of dynamic real estate marketing with Hannah, the Marketing Manager at Workspace Group. Hear firsthand how their team generates engaging descriptions for thousands of office units by integrating diverse data sources—from PDF floorplans to web pages—using FME transformers, like OpenAIVisionConnector and AnthropicVisionConnector. This use case will show you how GenAI can streamline content creation for marketing across the board.
Ollama Use Case: Learn how Scenario Specialist Dmitri Bagh has utilized Ollama within FME to input data, create custom models, and enhance security protocols. This segment will include demos to illustrate the full capabilities of FME in AI-driven processes.
Custom AI Models: Discover how to leverage FME to build personalized AI models using your data. Whether it’s populating a model with local data for added security or integrating public AI tools, find out how FME facilitates a versatile and secure approach to AI.
We’ll wrap up with a live Q&A session where you can engage with our experts on your specific use cases, and learn more about optimizing your data workflows with AI.
This webinar is ideal for professionals seeking to harness the power of AI within their data management systems while ensuring high levels of customization and security. Whether you're a novice or an expert, gain actionable insights and strategies to elevate your data processes. Join us to see how FME and AI can revolutionize how you work with data!
Skybuffer SAM4U tool for SAP license adoption
Manage and optimize your license adoption and consumption with SAM4U, an SAP free customer software asset management tool.
SAM4U, an SAP complimentary software asset management tool for customers, delivers a detailed and well-structured overview of license inventory and usage with a user-friendly interface. We offer a hosted, cost-effective, and performance-optimized SAM4U setup in the Skybuffer Cloud environment. You retain ownership of the system and data, while we manage the ABAP 7.58 infrastructure, ensuring fixed Total Cost of Ownership (TCO) and exceptional services through the SAP Fiori interface.
Artificial Intelligence for XMLDevelopment
In the rapidly evolving landscape of technologies, XML continues to play a vital role in structuring, storing, and transporting data across diverse systems. The recent advancements in artificial intelligence (AI) present new methodologies for enhancing XML development workflows, introducing efficiency, automation, and intelligent capabilities. This presentation will outline the scope and perspective of utilizing AI in XML development. The potential benefits and the possible pitfalls will be highlighted, providing a balanced view of the subject.
We will explore the capabilities of AI in understanding XML markup languages and autonomously creating structured XML content. Additionally, we will examine the capacity of AI to enrich plain text with appropriate XML markup. Practical examples and methodological guidelines will be provided to elucidate how AI can be effectively prompted to interpret and generate accurate XML markup.
Further emphasis will be placed on the role of AI in developing XSLT, or schemas such as XSD and Schematron. We will address the techniques and strategies adopted to create prompts for generating code, explaining code, or refactoring the code, and the results achieved.
The discussion will extend to how AI can be used to transform XML content. In particular, the focus will be on the use of AI XPath extension functions in XSLT, Schematron, Schematron Quick Fixes, or for XML content refactoring.
The presentation aims to deliver a comprehensive overview of AI usage in XML development, providing attendees with the necessary knowledge to make informed decisions. Whether you’re at the early stages of adopting AI or considering integrating it in advanced XML development, this presentation will cover all levels of expertise.
By highlighting the potential advantages and challenges of integrating AI with XML development tools and languages, the presentation seeks to inspire thoughtful conversation around the future of XML development. We’ll not only delve into the technical aspects of AI-powered XML development but also discuss practical implications and possible future directions.
Operating System Used by Users in day-to-day life.pptx
Dive into the realm of operating systems (OS) with Pravash Chandra Das, a seasoned Digital Forensic Analyst, as your guide. 🚀 This comprehensive presentation illuminates the core concepts, types, and evolution of OS, essential for understanding modern computing landscapes.
Beginning with the foundational definition, Das clarifies the pivotal role of OS as system software orchestrating hardware resources, software applications, and user interactions. Through succinct descriptions, he delineates the diverse types of OS, from single-user, single-task environments like early MS-DOS iterations, to multi-user, multi-tasking systems exemplified by modern Linux distributions.
Crucial components like the kernel and shell are dissected, highlighting their indispensable functions in resource management and user interface interaction. Das elucidates how the kernel acts as the central nervous system, orchestrating process scheduling, memory allocation, and device management. Meanwhile, the shell serves as the gateway for user commands, bridging the gap between human input and machine execution. 💻
The narrative then shifts to a captivating exploration of prominent desktop OSs, Windows, macOS, and Linux. Windows, with its globally ubiquitous presence and user-friendly interface, emerges as a cornerstone in personal computing history. macOS, lauded for its sleek design and seamless integration with Apple's ecosystem, stands as a beacon of stability and creativity. Linux, an open-source marvel, offers unparalleled flexibility and security, revolutionizing the computing landscape. 🖥️
Moving to the realm of mobile devices, Das unravels the dominance of Android and iOS. Android's open-source ethos fosters a vibrant ecosystem of customization and innovation, while iOS boasts a seamless user experience and robust security infrastructure. Meanwhile, discontinued platforms like Symbian and Palm OS evoke nostalgia for their pioneering roles in the smartphone revolution.
The journey concludes with a reflection on the ever-evolving landscape of OS, underscored by the emergence of real-time operating systems (RTOS) and the persistent quest for innovation and efficiency. As technology continues to shape our world, understanding the foundations and evolution of operating systems remains paramount. Join Pravash Chandra Das on this illuminating journey through the heart of computing. 🌟
Best 20 SEO Techniques To Improve Website Visibility In SERP
Boost your website's visibility with proven SEO techniques! Our latest blog dives into essential strategies to enhance your online presence, increase traffic, and rank higher on search engines. From keyword optimization to quality content creation, learn how to make your site stand out in the crowded digital landscape. Discover actionable tips and expert insights to elevate your SEO game.
Monitoring and Managing Anomaly Detection on OpenShift.pdf
Monitoring and Managing Anomaly Detection on OpenShift
Overview
Dive into the world of anomaly detection on edge devices with our comprehensive hands-on tutorial. This SlideShare presentation will guide you through the entire process, from data collection and model training to edge deployment and real-time monitoring. Perfect for those looking to implement robust anomaly detection systems on resource-constrained IoT/edge devices.
Key Topics Covered
1. Introduction to Anomaly Detection
- Understand the fundamentals of anomaly detection and its importance in identifying unusual behavior or failures in systems.
2. Understanding Edge (IoT)
- Learn about edge computing and IoT, and how they enable real-time data processing and decision-making at the source.
3. What is ArgoCD?
- Discover ArgoCD, a declarative, GitOps continuous delivery tool for Kubernetes, and its role in deploying applications on edge devices.
4. Deployment Using ArgoCD for Edge Devices
- Step-by-step guide on deploying anomaly detection models on edge devices using ArgoCD.
5. Introduction to Apache Kafka and S3
- Explore Apache Kafka for real-time data streaming and Amazon S3 for scalable storage solutions.
6. Viewing Kafka Messages in the Data Lake
- Learn how to view and analyze Kafka messages stored in a data lake for better insights.
7. What is Prometheus?
- Get to know Prometheus, an open-source monitoring and alerting toolkit, and its application in monitoring edge devices.
8. Monitoring Application Metrics with Prometheus
- Detailed instructions on setting up Prometheus to monitor the performance and health of your anomaly detection system.
9. What is Camel K?
- Introduction to Camel K, a lightweight integration framework built on Apache Camel, designed for Kubernetes.
10. Configuring Camel K Integrations for Data Pipelines
- Learn how to configure Camel K for seamless data pipeline integrations in your anomaly detection workflow.
11. What is a Jupyter Notebook?
- Overview of Jupyter Notebooks, an open-source web application for creating and sharing documents with live code, equations, visualizations, and narrative text.
12. Jupyter Notebooks with Code Examples
- Hands-on examples and code snippets in Jupyter Notebooks to help you implement and test anomaly detection models.
System Design Case Study: Building a Scalable E-Commerce Platform - Hiike
This case study explores designing a scalable e-commerce platform, covering key requirements, system components, and best practices.
Skybuffer AI: Advanced Conversational and Generative AI Solution on SAP Busin...
Skybuffer AI, built on the robust SAP Business Technology Platform (SAP BTP), is the latest and most advanced version of our AI development, reaffirming our commitment to delivering top-tier AI solutions. Skybuffer AI harnesses all the innovative capabilities of the SAP BTP in the AI domain, from Conversational AI to cutting-edge Generative AI and Retrieval-Augmented Generation (RAG). It also helps SAP customers safeguard their investments into SAP Conversational AI and ensure a seamless, one-click transition to SAP Business AI.
With Skybuffer AI, various AI models can be integrated into a single communication channel such as Microsoft Teams. This integration empowers business users with insights drawn from SAP backend systems, enterprise documents, and the expansive knowledge of Generative AI. And the best part of it is that it is all managed through our intuitive no-code Action Server interface, requiring no extensive coding knowledge and making the advanced AI accessible to more users.
Introduction of Cybersecurity with OSS at Code Europe 2024
I develop the Ruby programming language, RubyGems, and Bundler, which are package managers for Ruby. Today, I will introduce how to enhance the security of your application using open-source software (OSS) examples from Ruby and RubyGems.
The first topic is CVE (Common Vulnerabilities and Exposures). I have published CVEs many times. But what exactly is a CVE? I'll provide a basic understanding of CVEs and explain how to detect and handle vulnerabilities in OSS.
Next, let's discuss package managers. Package managers play a critical role in the OSS ecosystem. I'll explain how to manage library dependencies in your application.
I'll share insights into how the Ruby and RubyGems core team works to keep our ecosystem safe. By the end of this talk, you'll have a better understanding of how to safeguard your code.
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
Discover the seamless integration of RPA (Robotic Process Automation), COMPOSER, and APM with AWS IDP enhanced with Slack notifications. Explore how these technologies converge to streamline workflows, optimize performance, and ensure secure access, all while leveraging the power of AWS IDP and real-time communication via Slack notifications.
Your One-Stop Shop for Python Success: Top 10 US Python Development Providers
Simplify your search for a reliable Python development partner! This list presents the top 10 trusted US providers offering comprehensive Python development services, ensuring your project's success from conception to completion.
5th LF Energy Power Grid Model Meet-up Slides
5th Power Grid Model Meet-up
It is with great pleasure that we extend to you an invitation to the 5th Power Grid Model Meet-up, scheduled for 6th June 2024. This event will adopt a hybrid format, allowing participants to join us either through an online Mircosoft Teams session or in person at TU/e located at Den Dolech 2, Eindhoven, Netherlands. The meet-up will be hosted by Eindhoven University of Technology (TU/e), a research university specializing in engineering science & technology.
Power Grid Model
The global energy transition is placing new and unprecedented demands on Distribution System Operators (DSOs). Alongside upgrades to grid capacity, processes such as digitization, capacity optimization, and congestion management are becoming vital for delivering reliable services.
Power Grid Model is an open source project from Linux Foundation Energy and provides a calculation engine that is increasingly essential for DSOs. It offers a standards-based foundation enabling real-time power systems analysis, simulations of electrical power grids, and sophisticated what-if analysis. In addition, it enables in-depth studies and analysis of the electrical power grid’s behavior and performance. This comprehensive model incorporates essential factors such as power generation capacity, electrical losses, voltage levels, power flows, and system stability.
Power Grid Model is currently being applied in a wide variety of use cases, including grid planning, expansion, reliability, and congestion studies. It can also help in analyzing the impact of renewable energy integration, assessing the effects of disturbances or faults, and developing strategies for grid control and optimization.
What to expect
For the upcoming meetup we are organizing, we have an exciting lineup of activities planned:
-Insightful presentations covering two practical applications of the Power Grid Model.
-An update on the latest advancements in Power Grid -Model technology during the first and second quarters of 2024.
-An interactive brainstorming session to discuss and propose new feature requests.
-An opportunity to connect with fellow Power Grid Model enthusiasts and users.
June Patch Tuesday
Ivanti’s Patch Tuesday breakdown goes beyond patching your applications and brings you the intelligence and guidance needed to prioritize where to focus your attention first. Catch early analysis on our Ivanti blog, then join industry expert Chris Goettl for the Patch Tuesday Webinar Event. There we’ll do a deep dive into each of the bulletins and give guidance on the risks associated with the newly-identified vulnerabilities.
Recently uploaded (20)
Trusted Execution Environment for Decentralized Process Mining
Trusted Execution Environment for Decentralized Process Mining
Deep Dive: AI-Powered Marketing to Get More Leads and Customers with HyperGro...
Deep Dive: AI-Powered Marketing to Get More Leads and Customers with HyperGro...
Nunit vs XUnit vs MSTest Differences Between These Unit Testing Frameworks.pdf
Nunit vs XUnit vs MSTest Differences Between These Unit Testing Frameworks.pdf
Driving Business Innovation: Latest Generative AI Advancements & Success Story
Driving Business Innovation: Latest Generative AI Advancements & Success Story
Operating System Used by Users in day-to-day life.pptx
Operating System Used by Users in day-to-day life.pptx
Best 20 SEO Techniques To Improve Website Visibility In SERP
Best 20 SEO Techniques To Improve Website Visibility In SERP
Monitoring and Managing Anomaly Detection on OpenShift.pdf
Monitoring and Managing Anomaly Detection on OpenShift.pdf
System Design Case Study: Building a Scalable E-Commerce Platform - Hiike
System Design Case Study: Building a Scalable E-Commerce Platform - Hiike
Skybuffer AI: Advanced Conversational and Generative AI Solution on SAP Busin...
Skybuffer AI: Advanced Conversational and Generative AI Solution on SAP Busin...
Introduction of Cybersecurity with OSS at Code Europe 2024
Introduction of Cybersecurity with OSS at Code Europe 2024
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
Your One-Stop Shop for Python Success: Top 10 US Python Development Providers
Your One-Stop Shop for Python Success: Top 10 US Python Development Providers
Gluu EDU Webinar: Shibboleth/SAML SSO
- 1. How 11 US universities are using Gluu EDU to normalize and support a Shibboleth IdP November 16, 2012
- 2. Today's Agenda Hosted by: 1. Introduction & Overview 2. Typical Gluu Deployments 3. The Business Case for a managed IdP Service Michael Schwartz Gluu CEO and Founder 4. Gluu Demo 5. Q&A
- 4. Typical Deployments: Number of Servers Scenario 1: 1 Production Server. Scenario 2 (Most Popular): 1 Production Server, 1 Development Server. Scenario 3: 2 Production Servers, 2 Development Servers
- 5. Typical Deployments: Public vs. Private Public: Your server hosted on a dedicated Rackspace VM. You maintain root access for SSH. Private (Most Popular): Your server hosted inside your firewall, on your own VM.
- 6. The Business Case: Buy vs. Build..? With typical non-clustered Gluu EDU deployment: 1 Prod Server / 1 Dev Server = $2,400/yr ~ 3% FTE allocation For 3% FTE resource: ○ A GUI for Shibboleth (No More Manual XML!!) ○ Expert support from team of federation specialists ○ 24/7 Monitoring ○ Config management ○ Revision Control ○ SLA reporting
- 8. Gluu EDU Optionals: ● Integrated Multi-Factor Authentication ● Support for Radius ● OpenID Connect ● High Availability Clustered Deployment (Minimum 4 Servers)
- 9. DEMO - Identity Management ○ Attributes ○ LDAP Mapping - Certificate Management - Look and Feel - SAML ○ Trust Relationships ○ Federation Hosting - OpenID Connect ○ Two Factor Authentication ○ Scopes ○ Clients ○ Discovery
- 10. Q&A Learn More at http://gluu.org/edu We Support: Some Gluu EDU Customers: ● University of Kentucky ● Oklahoma State University ● The University of Oklahoma ● Georgia State University ● Franklin and Marshall