News lets the community share announcements, press releases, and recommended news articles relevent to SAML. (Educational materials that are not time-sensitive are listed at Articles and white papers.)
In Part 1 of this article, I discussed using a Java application as a Web service client and a creative way to secure that client using JAAS and SAML. Part 2 is a consequence of the same application, but I examine how to attach a SAML token to a SOAP message from within a Java application to invoke a Web service that is secured using WS-Security SAML policy file. Here I focus on the mechanism needed to invoke a secure Web service.
Read the complete article by Frank Teti at Dr. Dobb's Journal.
Liberty Alliance, the global identity community working to build a more trust-worthy internet for consumers, governments and businesses worldwide, today announced Aetna, Citi, Deutsche Telekom AG and UNINETT have won the 2008 IDDY (Identity Deployment of the Year) Award.
Read the complete article.
Microsoft (NSDQ: MSFT)'s software plus services platform, Live Mesh, is now available to anyone in the United States, the company announced Wednesday. Live Meshwill also have additional functionality as an application platform for developers, unlike MobileMe. Microsoft will use open standards including Atom, JSON, POX, RSS, SAML, HTTP, REST, and FeedSync to allow for interoperability.
Read the complete article by J Nicholas Hoover at Information Week.
Identity-Enabled Applications in the Healthcare, Financial Services, Telecom and Open Source Sectors Receive Identity Deployment of the Year Awards Liberty Alliance – July 17, 2008 -- Liberty Alliance, the global identity community working to build a more trust-worthy internet for consumers, governments and businesses worldwide, today announced Aetna, Citi, Deutsche Telekom AG and UNINETT have won the 2008 IDDY (Identity Deployment of the Year) Award.
A draft version of the SAML 2.0 Information Card Token Profile has been submitted to the OASIS Security Services (SAML) TC. "Microsoft has defined a set of profiles for acquring and delivering security tokens, collectively referred to as 'Information Card' technology. These profiles are agnostic with respect to the format and semantics of a security token, but interoperability between issuing and relying parties cannot be achieved without additional rules governing the creation and use of the tokens exchanged.
