Authentication and strong authentication for Web Application
•Download as PPT, PDF•
3 likes•842 views
WebCast: Authentication and Strong Authentication in Web Applications WebCast
![Agenda ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Viewers also liked
Viewers also liked (11)
Similar to Authentication and strong authentication for Web Application
Similar to Authentication and strong authentication for Web Application (20)
More from Sylvain Maret
More from Sylvain Maret (20)
Recently uploaded
Recently uploaded (20)
Authentication and strong authentication for Web Application
- 1. Sylvain Maret / Digital Security Expert @ MARET Consulting BrightTALK - October 7th 2010 Authentication and Strong Authentication in Web Application
- 4. Protection of digital identities: a topical issue…
- 5. threats on the authentication
- 8. Definition of strong authentication Strong Authentication on Wikipedia
- 9. «Digital identity is the cornerstone of trust» More information on the subject
- 10. Strong Authentication A new paradigm !
- 11. Which strong authentication technology? (Legacy Token …..)
- 13. * * Biometry type Fingerprinting OTP PKI (HW) Biometry Strong authentication Encryption Digital signature Non repudiation Strong link with the user
- 15. Authentication Server must be agnostic
- 16. New Standards & Open Source
- 18. Integration with web application
- 19. Web applications: basic authentication model
- 20. Web application: strong authentication model
- 21. “ Shielding" approach: perimetric authentication
- 24. SSL PKI: how does it work? Web Server Alice Validation Authority Valid Invalid Unknown OCSP request SSL / TLS Mutual Authentication
- 25. Federated identities: a changing paradigm on authentication
- 26. Federation of identity approach a change of paradigm: using IDP for Authentication and Strong Authentication Web App X Web App Y Identity Provider
- 28. Using SAML for Authentication and Strong Authentication (Assertion Consumer Service)
- 30. SAML – How does it work? Identity Provider e.g. clavid.ch User Hans Muster Enabled Service e.g. Google Apps for Business 1 2 2 6 3 4 4
- 31. Example with HTTP POST Binding
- 32. SAML AuthN & ACS integration in Web Application
- 35. OpenID - How does it work? 1 3 5 Enabled Service 6 4, 4a User Hans Muster Caption 1. User enters OpenID 2. Discovery 3. Authentication 4. Approval 4a. Change Attributes 5. Send Attributes 6. Validation 2 Identity URL https://hans.muster.clavid.com Identity Provider e.g. clavid.com hans.muster.clavid.com
- 36. Architecture IPD Authentication Server
- 37. Unique Interface Agnostic / Easy SAML
- 42. "Le conseil et l'expertise pour le choix et la mise en oeuvre des technologies innovantes dans la sécurité des systèmes d'information et de l'identité numérique"