The document discusses authentication and authorization standards and patterns. It describes an intermediary pattern that provides a central login screen supporting multiple protocols like SAML, OpenID, and CAS. It also discusses challenges of wrapping one's mind around the model. Entity trust and multiple authentication principals are covered. Business to business authentication between business processes is mentioned along with design requirements. Attributes, assertions, and federated authorization are listed along with OAuth and SAML 2.0 standards.

1. Tom Freestone
26 June 2012

2. Technical Lead Authentication Products
Technical Lead Portal Services

3. Past
Present
Future

6. Intermediary Pattern

8. Security Abstraction
Multiple protocols
SAML
OpenId
Spengo
CAS
Central Login Screen
B2C
Challenges
Wrapping mind around the
model

9. Entity
Trust
Multiple Authentication
Principal
Entity

10. B2B Authentication
Business Process to
Business Process
Design Requirements
Traffic
Multi-Purpose
Secure
Simple, elegant
Challenges
Wrap your mind around
Not a standard

11. Attributes
Assertions
Federated Authorization
Standards
OAuth
SAML 2