Archive for 2017

2017/09/24: Service Provider expiration and quotas now enforced

English, Ticker on September 24th, 2017 No Comments

Starting at 2017/09/24 we are now enforcing quotas and expiration for imported SAML Service Providers as mentioned in the Comparison Pricing List. Default of Expiration for SAML Service Providers is 30 days. From that point on, SSO to the services will not work anymore. The first expiration date for old Service Providers will be 2017/10/24:06:00:00 […]

SAML SSO to Amazon AWS from SSOCircle

English on September 19th, 2017 No Comments

Many people were asking about doing SSO to Amazon AWS from SSOCircle. Since SSOCircle Public IDP has a common Circle of Trust the Service Provider EntityIDs are shared and must be unique. AWS provides a single SAML Service Provider Metadata file at https://signin.aws.amazon.com/static/saml-metadata.xml for all AWS customers. As the AWS SP is already imported into […]

Tags: , , ,

Impressions from European Identity & Cloud Conference 2017

English on May 19th, 2017 No Comments

No new standards, no protocol declared dead – but new compliance directives which have huge impact on business practices and deployed IAM services. The General Data Protection Regulation (GDPR) and the Revised Directive on Payment Services (PSD2) will be applied in 2018 after a two-years transition period. From the importance of establishing a legal identity […]

Tags: , , , , , , ,

Relationship Based Access Control in IoT and User Managed Access

English on April 25th, 2017 No Comments

Relationship Based Access Control (ReBAC) models originate from access control considerations made for Online Social Networks (OSN). In original ReBAC studies User-to-User (U2U) relations determine the access control decision made whenever a user (accessor) tries to access a resource. Policies typically evaluate the type, depth and strength of the U2U relation between the accessor and […]

Tags: , ,

Next Generation Identity and Access Management

English on April 6th, 2017 No Comments

SSOCircle recently introduces a Graph based identity management system with user manageable access permissions and an entitlement API. Enter ReBAC (Relationship Based Access Control. Add ReBAC to ABAC (Attribute Based Access Control) and RBAC (Role Based Access Control) and get StarBAC. ReBAC can be described by the explicit tracking of relationships between identities themselves and […]

Tags: , , , , , , , , ,

Launching MyIdentityGraph and ReBAC AzaaS

Ticker on April 4th, 2017 No Comments