#iiw 13th report at #idcon 10th

•

0 j'aime•1,050 vues

Nov Matake

Technologie Divertissement et humour

OAUTH 2.0

• Service Chaining With Oauth Bearer Tokens

• Federated Authorization w/ OAuth2

• OAuth
Web Authentication Where the Protocol is
and What’s Next

• Identity
Layer 4 OAuth 2 and Multi-Protocol
Support Discussion

FEDERATED AUTHORIZATION W/ OAUTH2
Federated
Client Resource Server AuthZ Server
Auth Grant
JWT Token

JWT as Bearer
Validate JWT
(OPTIONAL)

Resource

OAUTH WEB AUTHENTICATION
WHAT’S NEXT
• OAuth 2.0 RFC expected in Nov 2011

• Identity layer in OAuth not in OpenID Connect?

• OAuth WG Rechartering

[OAuth WG]
JWT, SWD, OAuth Assertions, OAuth SAML proﬁle,
Token Revocation, OAuth JWT proﬁle

[JOSE WG]
JWS, JTE, JWK

OPENID CONNECT
• OpenID Connect Intro

• OpenID Connect Spec Work Client Registration

• OpenID Connect Spec Work Session

• OpenID Connect Editing Session

• OpenID Connect Flows and Levels of Assurance

• Smart
OpenID Connect Chip to Cloud via OpenID
Connect

OPENID CONNECT
• OpenID Connect Intro

• OpenID Connect Spec Work Client Registration
MAINLY SPEC WORKS,
• OpenID Connect Spec Work Session
BUT LOTS OF MENTIONS AROUND
• OpenID Connect Editing Session

• OpenID Connect Flows and Levels of Assurance

• Smart
OpenID Connect Chip to Cloud via OpenID
Connect

OPENID WORKSHOP

• 10/17 at AOL (the day before IIW#13 started)

• Interop Review

• @ritou, @nov, NRI US (Edmund)

• Discussion about Implementers Dra3

• Open Issues Review

MONETIZING STREET IDENTITY &
MOBILE AUTHENTICATION ‘LMNOP’

veriﬁed address
$x.xx

verify
veriﬁed $1.00
address

RPs
http://j.mp/street_identity

• 1st F2F meet-up w/ @pelleb & @tomwiththeweath

• Spec Updates

• 1st formal-ish document (opentransact.org/core)

• OAuth 2.0 based (will be OpenID Connect based)

• Receipt format, Discovery etc.

• OAuth 2.0 spec is going to next phase

• More extensions, federation, service-chaining etc.

• OpenID Connect is hot

• Implementers Dra3 coming soon..

• Open Identity Attribute Exchange Summit
(11/09-10 in Washington, D.C.)

OPEN TRANSACT

[HOMEWORK]
MAKE THIS OPENID CONNECT BASED

Contenu connexe

Similaire à #iiw 13th report at #idcon 10th

Oauth tutorial乐费胡

OAuth 2.0 at the GlobiotsTran Thanh Thi

Web API 2 Token Based Authenticationjeremysbrown

AllTheTalks.Online 2020: "Basics of OAuth 2.0 and OpenID Connect"Andreas Falk

JavaOne 2014 - Securing RESTful Resources with OAuth2Rodrigo Cândido da Silva

Getting Started with Spring Authorization ServerVMware Tanzu

Making Sense of API Access ControlCA API Management

JHipster and Okta - JHipster Virtual Meetup December 2020Matt Raible

2019 - Tech Talk DC - Token-based security for web applications using OAuth2 ...Vladimir Bychkov

OAuth and why you should use itSergey Podgornyy

INTERFACE by apidays - TxAuth: the future of OAuth? by Dick Hardtapidays

ConFoo 2015 - Securing RESTful resources with OAuth2Rodrigo Cândido da Silva

OpenStack ArchitectureMirantis

Jwt the complete guide to json web tokensremayssat

OAuth - Don’t Throw the Baby Out with the Bathwater Apigee | Google Cloud

OAuth2 - IntroductionKnoldus Inc.

OAuth 2.0 Updates #technight in OsakaNov Matake

Demystifying SAML 2.0,Oauth 2.0, OpenID ConnectVinay Manglani

WCF Data Services - Office Business Application & iPhoneAndri Yadi

Similaire à #iiw 13th report at #idcon 10th (20)

Oauth tutorial

OAuth 2.0 at the Globiots

Web API 2 Token Based Authentication

AllTheTalks.Online 2020: "Basics of OAuth 2.0 and OpenID Connect"

JavaOne 2014 - Securing RESTful Resources with OAuth2

Getting Started with Spring Authorization Server

Making Sense of API Access Control

JHipster and Okta - JHipster Virtual Meetup December 2020

2019 - Tech Talk DC - Token-based security for web applications using OAuth2 ...

OAuth and why you should use it

INTERFACE by apidays - TxAuth: the future of OAuth? by Dick Hardt

ConFoo 2015 - Securing RESTful resources with OAuth2

OpenStack Architecture

Jwt the complete guide to json web tokens

OAuth - Don’t Throw the Baby Out with the Bathwater

OAuth2 - Introduction

OAuth 2.0 Updates #technight in Osaka

Demystifying SAML 2.0,Oauth 2.0, OpenID Connect

WCF Data Services - Office Business Application & iPhone

Plus de Nov Matake

#idcon vol.29 - #fidcon WebAuthn, Next StageNov Matake

FedCM - OpenID TechNight vol.19Nov Matake

Safari (ITP) & Chrome (SameSite=Lax as default) が Federation に与える影響 - OpenID ...Nov Matake

FIDO @ LINE - #idcon vol.24Nov Matake

W3C Web Authentication - #idcon vol.24Nov Matake

NIST SP 800-63C - Federation and Assertions (FINAL)Nov Matake

OPTiM StoreにおけるSCIM & OIDC活用事例 - ID&IT 2016Nov Matake

NIST SP 800-63C #idcon vol.22Nov Matake

NIST SP 800-63-3 #idcon vol.22Nov Matake

ID連携入門 (実習編) - Security Camp 2016Nov Matake

ID連携概要 - OpenID TechNight vol.13Nov Matake

ミスコンとプライバシー ~ IdentityDuck誕生秘話 ~ #idconNov Matake

SAML / OpenID Connect / OAuth / SCIM 技術解説 - ID&IT 2014 #idit2014Nov Matake

FIDO alliance #idcon vol.18Nov Matake

OpenID Connect 101 @ OpenID TechNight vol.11Nov Matake

池澤あやかと学ぼう！: はじめてのOAuthとOpenID Connect - JICS 2014Nov Matake

OAuth認証再考からのOpenID Connect #devloveNov Matake

ID & IT 2013 - OpenID Connect Hands-onNov Matake

JWT Translation #technightNov Matake

Plus de Nov Matake (20)

#idcon vol.29 - #fidcon WebAuthn, Next Stage

FedCM - OpenID TechNight vol.19

Safari (ITP) & Chrome (SameSite=Lax as default) が Federation に与える影響 - OpenID ...

FIDO @ LINE - #idcon vol.24

W3C Web Authentication - #idcon vol.24

NIST SP 800-63C - Federation and Assertions (FINAL)

OPTiM StoreにおけるSCIM & OIDC活用事例 - ID&IT 2016

NIST SP 800-63C #idcon vol.22

NIST SP 800-63-3 #idcon vol.22

ID連携入門 (実習編) - Security Camp 2016

ID連携概要 - OpenID TechNight vol.13

ミスコンとプライバシー ~ IdentityDuck誕生秘話 ~ #idcon

SAML / OpenID Connect / OAuth / SCIM 技術解説 - ID&IT 2014 #idit2014

FIDO alliance #idcon vol.18

OpenID Connect 101 @ OpenID TechNight vol.11

池澤あやかと学ぼう！: はじめてのOAuthとOpenID Connect - JICS 2014

OAuth認証再考からのOpenID Connect #devlove

ID & IT 2013 - OpenID Connect Hands-on

JWT Translation #technight

Dernier

Handwritten Text Recognition for manuscripts and early printed textsMaria Levchenko

04-2024-HHUG-Sales-and-Marketing-Alignment.pptxHampshireHUG

Strategies for Landing an Oracle DBA Job as a FresherRemote DBA Services

GenCyber Cyber Security Day PresentationMichael W. Hawkins

A Domino Admins Adventures (Engage 2024)Gabriella Davis

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProduct Anonymous

Tech Trends Report 2024 Future Today Institute.pdfhans926745

Tata AIG General Insurance Company - Insurer Innovation Award 2024The Digital Insurer

Developing An App To Navigate The Roads of BrazilV3cube

Axa Assurance Maroc - Insurer Innovation Award 2024The Digital Insurer

Automating Google Workspace (GWS) & more with Apps Scriptwesley chun

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...DianaGray10

HTML Injection Attacks: Impact and Mitigation StrategiesBoston Institute of Analytics

TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc

Exploring the Future Potential of AI-Enabled Smartphone Processorsdebabhi2

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...apidays

🐬 The future of MySQL is Postgres 🐘RTylerCroy

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...Neo4j

Partners Life - Insurer Innovation Award 2024The Digital Insurer

Powerful Google developer tools for immediate impact! (2023-24 C)wesley chun

Dernier (20)

Handwritten Text Recognition for manuscripts and early printed texts

04-2024-HHUG-Sales-and-Marketing-Alignment.pptx

Strategies for Landing an Oracle DBA Job as a Fresher

GenCyber Cyber Security Day Presentation

A Domino Admins Adventures (Engage 2024)

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

Tech Trends Report 2024 Future Today Institute.pdf

Tata AIG General Insurance Company - Insurer Innovation Award 2024

Developing An App To Navigate The Roads of Brazil

Axa Assurance Maroc - Insurer Innovation Award 2024

Automating Google Workspace (GWS) & more with Apps Script

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...

HTML Injection Attacks: Impact and Mitigation Strategies

TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments

Exploring the Future Potential of AI-Enabled Smartphone Processors

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...

🐬 The future of MySQL is Postgres 🐘

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...

Partners Life - Insurer Innovation Award 2024

Powerful Google developer tools for immediate impact! (2023-24 C)

#iiw 13th report at #idcon 10th

1. @nov

2. IIW #13, 18-21 OCT 2011

4. J.MP/IIW13

6. OAUTH 2.0 • Service Chaining With Oauth Bearer Tokens • Federated Authorization w/ OAuth2 • OAuth Web Authentication Where the Protocol is and What’s Next • Identity Layer 4 OAuth 2 and Multi-Protocol Support Discussion

7. FEDERATED AUTHORIZATION W/ OAUTH2 Federated Client Resource Server AuthZ Server Auth Grant JWT Token JWT as Bearer Validate JWT (OPTIONAL) Resource

8. FEDERATED AUTHORIZATION W/ OAUTH2 Federated Client Resource Server AuthZ Server Auth Grant JWT Token JWT as Bearer Validate JWT (OPTIONAL) Resource

9. OAUTH WEB AUTHENTICATION WHAT’S NEXT • OAuth 2.0 RFC expected in Nov 2011 • Identity layer in OAuth not in OpenID Connect? • OAuth WG Rechartering [OAuth WG] JWT, SWD, OAuth Assertions, OAuth SAML proﬁle, Token Revocation, OAuth JWT proﬁle [JOSE WG] JWS, JTE, JWK

10. OAuth WG JOSE WG

11. OPENID CONNECT • OpenID Connect Intro • OpenID Connect Spec Work Client Registration • OpenID Connect Spec Work Session • OpenID Connect Editing Session • OpenID Connect Flows and Levels of Assurance • Smart OpenID Connect Chip to Cloud via OpenID Connect

12. OPENID CONNECT • OpenID Connect Intro • OpenID Connect Spec Work Client Registration MAINLY SPEC WORKS, • OpenID Connect Spec Work Session BUT LOTS OF MENTIONS AROUND • OpenID Connect Editing Session • OpenID Connect Flows and Levels of Assurance • Smart OpenID Connect Chip to Cloud via OpenID Connect

13. OPENID WORKSHOP • 10/17 at AOL (the day before IIW#13 started) • Interop Review • @ritou, @nov, NRI US (Edmund) • Discussion about Implementers Dra3 • Open Issues Review

14. MONETIZING STREET IDENTITY & MOBILE AUTHENTICATION ‘LMNOP’ veriﬁed address $x.xx verify veriﬁed $1.00 address RPs http://j.mp/street_identity

15. OPEN TRANSACT

16.

17. • 1st F2F meet-up w/ @pelleb & @tomwiththeweath • Spec Updates • 1st formal-ish document (opentransact.org/core) • OAuth 2.0 based (will be OpenID Connect based) • Receipt format, Discovery etc.

18. • OAuth 2.0 spec is going to next phase • More extensions, federation, service-chaining etc. • OpenID Connect is hot • Implementers Dra3 coming soon.. • Open Identity Attribute Exchange Summit (11/09-10 in Washington, D.C.)

19. OPEN TRANSACT [HOMEWORK] MAKE THIS OPENID CONNECT BASED

Notes de l'éditeur

\n
&#x6BCE;&#x5E74;&#x6625;&#x79CB;2&#x56DE; @ Computer History Museum\n
&#x4E88;&#x60F3;&#x3057;&#x3066;&#x305F;&#x3088;&#x308A;&#x5E74;&#x9F62;&#x5C64;&#x9AD8;&#x304B;&#x3063;&#x305F;\n&#x6BCE;&#x671D;&#x30CD;&#x30BF;&#x6301;&#x3061;&#x5BC4;&#x3063;&#x3066;&#x30A2;&#x30B8;&#x30A7;&#x30F3;&#x30C0;&#x4F5C;&#x6210;\n
&#x58C1;&#x306B;&#x30DA;&#x30BF;&#x30DA;&#x30BF; => &#x30B9;&#x30B1;&#x30B8;&#x30E5;&#x30FC;&#x30EB;\n&#x3053;&#x306E;URL&#x306B;&#x767A;&#x8868;&#x5185;&#x5BB9;&#x4E00;&#x89A7;&#x3042;&#x308B; (&#x305F;&#x3060;&#x3057;&#x30EC;&#x30DD;&#x30FC;&#x30C8;&#x7A7A;&#x3063;&#x307D;&#x306A;&#x306E;&#x591A;&#x3044;)\n
OAuth 2.0 & OpenID Connect &#x30E1;&#x30A4;&#x30F3; (&#x3084;&#x3063;&#x3071;&#x308A;&#x306D;)\n
\n
George Fletcher from AOL\nAccess Token in JWT => Validatable\n
uid for what?\n
Barry Leiba from IETF OAuth WG\nfor 2nd one, use-case document will come\nMore discussions in OAuth ML\n
OpenID Connect related\n
\n
\n
\n
Business model for mobile careers\nMotivation for Attributes Provider\n
\n
\n
\n
\n
\n

#iiw 13th report at #idcon 10th

Recommandé

Recommandé

Contenu connexe

Similaire à #iiw 13th report at #idcon 10th

Similaire à #iiw 13th report at #idcon 10th (20)

Plus de Nov Matake

Plus de Nov Matake (20)

Dernier

Dernier (20)

#iiw 13th report at #idcon 10th

Notes de l'éditeur