In Space No Two Airlocks Are The Same

There is no a single standard airlock. Sensitive data, whether patient records or financial information, requires control governing the sharing of that data. These controls must conform with the common common law concept of confidentiality, data protection laws (primarily UK GDPR and the Data Protection Act 2018) and variance across organisational governance. Specifically the variant… Continue reading In Space No Two Airlocks Are The Same

Why the Future of Identity is OpenID Connect and not SAML

This blog is part of a series comparing the implementation of identity management patterns in SAML and OpenID Connect: Identity Broker Service in OpenID Connect Identity Broker Service in SAML OpenID Connect AuthN & AuthZ Comparison of OpenID Connect with OAuth2.0 & SAML2.0 Cross Domain Identity Patterns: Chained Federation & Service Broker Future of Identity Federation is OpenID Connect Identity… Continue reading Why the Future of Identity is OpenID Connect and not SAML

The Future of Identity Management According to CoTS Vendors Part 1

Most identity management software vendors will rationalise their service enablement capability as so: Identity and access management has traditionally focused on managing user accounts in the form of directory service entries - the traditional IAM/IdM view it has seldom involved managing identities, let alone multiple types. They might digress slightly here on the history of Master Data… Continue reading The Future of Identity Management According to CoTS Vendors Part 1