Comments on: Identity Management Systems http://www.darcynorman.net/2006/04/26/identity-management-systems/ ragingly ambivalent. or something. whatever. Fri, 12 Mar 2010 15:46:33 -0700 http://wordpress.org/?v=2.9.2 hourly 1 By: D'Arcy http://www.darcynorman.net/2006/04/26/identity-management-systems/#comment-81793 D'Arcy Wed, 31 Dec 1969 17:00:00 +0000 231632163#comment-81793 Kim, thanks for the clarification. Is Infocard a Windows-only solution? Can it be used by software on other platforms, or is it an integrated part of Vista? Can it be used by web apps (java, php, etc...)? Kim, thanks for the clarification. Is Infocard a Windows-only solution? Can it be used by software on other platforms, or is it an integrated part of Vista? Can it be used by web apps (java, php, etc…)?

]]> By: Kim Cameron http://www.darcynorman.net/2006/04/26/identity-management-systems/#comment-81794 Kim Cameron Wed, 31 Dec 1969 17:00:00 +0000 231632163#comment-81794 I put infocard in identity 2.0 - user centric - and so does Dick Hardt and Johannes I put infocard in identity 2.0 – user centric – and so does Dick Hardt and Johannes

]]> By: Conor P. Cahill http://www.darcynorman.net/2006/04/26/identity-management-systems/#comment-81795 Conor P. Cahill Wed, 31 Dec 1969 17:00:00 +0000 231632163#comment-81795 Liberty Alliance and SAML are protocols, not implementations. The protocols can be used to implement any of the 3 identified models above (so, yes, I can use Liberty/SAML protocols to run an IdP off my phone/laptop to assert any identity that I currently maintain). In reality, I expect that the the world of Identity will evolve towards a mixture of third party asserted (what you would call centralized) and what I refer to as self asserted (I don't use the term user-centric since any identity system can be user-centric if they give control of the use of the identity to the user). Depending upon where you want to assert your identity you may need one form or another. Conor Liberty Alliance and SAML are protocols, not implementations. The protocols can be used to implement any of the 3 identified models above (so, yes, I can use Liberty/SAML protocols to run an IdP off my phone/laptop to assert any identity that I currently maintain).

In reality, I expect that the the world of Identity will evolve towards a mixture of third party asserted (what you would call centralized) and what I refer to as self asserted (I don’t use the term user-centric since any identity system can be user-centric if they give control of the use of the identity to the user). Depending upon where you want to assert your identity you may need one form or another.

Conor

]]> By: D'Arcy http://www.darcynorman.net/2006/04/26/identity-management-systems/#comment-81796 D'Arcy Wed, 31 Dec 1969 17:00:00 +0000 231632163#comment-81796 Conor - thanks for the clarification. I'm still in the early stages of getting my feet wet in the identity concepts, so likely have a lot of stuff a bit muddy at the moment. Also, thanks for the distinction between self-asserted and user-centric. They are different things, but I was using them as interchangable terms. Conor – thanks for the clarification. I’m still in the early stages of getting my feet wet in the identity concepts, so likely have a lot of stuff a bit muddy at the moment.

Also, thanks for the distinction between self-asserted and user-centric. They are different things, but I was using them as interchangable terms.

]]>