The SAML XML.org web site is not longer accepting new posts. Information on this page is preserved for legacy purposes only. For current information on SAML, please see the OASIS Security Services Technical Committee Wiki.

Welcome to SAML XML.org.

This is the official community gathering place and information resource for the SAML OASIS Standard. SAML provides an XML-based framework for creating and exchanging security information between online partners. This is a community-driven site, and the public is encouraged to contribute content.

Radiant Logic Enables Claims-Based Identity in Federated Systems

Radiant Logic announces the release of the Cloud Federation Service (CFS) for its RadiantOne Identity and Context Virtualization platform. This solution federates disparate identity sources, and securely delivers claims to cloud-based applications supporting SAML 1.1 and 2.0. The CFS connects multiple Active Directory domains and forests, as well as other identity sources (LDAP, SQL, web services), with applications such as Sharepoint 2010, Google apps, Salesforce, and Workday.
Read the complete announcement.

Read more

CSC Introduces CloudIAM Identity and Access Management Solution

CSC today announced CSC CloudIAM, a comprehensive cloud-based Identity and Access Management (IAM) solution built with cloud security company, Symplified®. CSC CloudIAM addresses the security and technical challenges faced by government and commercial enterprises who are transitioning applications to the cloud. This is accomplished by leveraging clients' existing credential stores and extending to them IAM features such as Single Sign-On (SSO), Role-Based Access (RBAC) and centralized audit logging for Software-as-a-Service (SaaS) applications...

 

Read more

Identity assurance means 'never having to say who are you, again?'

Eve Maler writes: A decade after launching the SAML standard and seeing its, shall we say, stately pace of adoption, it’s wild to see real single sign-on and federated attribute sharing starting to take off for social networking, retail sites, online gaming, and more — not to mention seeing the US government starting to consume private-sector identities on citizen-facing websites...We’re predicting you’ll see new Web 2.0-ish ways to outsource identity verification in the coming three years, driven by use cases like e-prescribing, high-value eCommerce, and eve

Read more

Linux Full Disk Encryption Secured with YubiKey Challenge-Response

Yubico, a leading provider of easy and secure login solutions, expands the use of its YubiKey with its first disk encryption solution thanks to a global open source community.

The proof of concept for using the YubiKey to encrypt the entire hard drive on a Linux computer has been developed by Tollef Fog Heen, a long time YubiKey user and Debian package maintainer.

Read more

VASCO Announces Acquisition of Alfa & Ariss

VASCO Data Security, a software security company specializing in authentication products and services, today announced its acquisition of Alfa & Ariss, an open identity and access management specialist of Enschede, The Netherlands. A&A was founded in 1999 and is an authority in the field of developing open identity and access management solutions. OpenASelect is A&A's high-profile authentication server platform. Companies implementing the OpenASelect platform don't need to invest in know-how or infrastructure, allowing them to focus on their core business.

Read more

XML.org Focus Areas: BPEL | DITA | ebXML | IDtrust | OpenDocument | SAML | UBL | UDDI
OASIS sites: OASIS | Cover Pages | XML.org | AMQP | CGM Open | eGov | Emergency | IDtrust | LegalXML | Open CSA | OSLC | WS-I