Security Assertion Markup Language (SAML) is an XML-based open standard for exchanging authentication and authorization data between security domains, that is, between an identity provider (a producer of assertions) and a service provider (a consumer of assertions). SAML is a product of the OASIS Security Services Technical Committee.
Published in Chapter:
Technical Perspective of Authentication Policy Extension for the Adaptive Social Services and e-Health Care Management
Masakazu Ohashi (Chuo University, Japan), Nat Sakimura (Nomura Research Institute, Japan), Mituo Fujimoto (Nomura Research Institute, Japan), Mayumi Hori (Hakuoh University, Japan), and Noriko Kurata (Chuo University, Japan)
Copyright: © 2013
|Pages: 8
DOI: 10.4018/978-1-4666-3986-7.ch037
Abstract
The substantiative study of private information box project of Japanese e-Government proved the effectiveness of the New Authentication Extension Technology to combine different social infrastructures to create new Secure services between Public Sector and Private Sector (Citizen). However, there are still issues to cope with outside of the realm of technology including accountability of each participants and the level of the service, OpenID and SAML are key federated identity protocols. Both SAML and OpenID define mechanisms in support of expressing assurance information on protocol messages, Authentication Context and the Provider Authentication Policy Extension (PAPE), respectively. In deployment scenarios that require proxying from one of the protocols to the other, it becomes necessary to map to and from the corresponding assurance mechanisms. This chapter provides theoretical study of Social and e-Health Data secure exchange methodology on this mapping and related issues.