以文本方式查看主题

-  W3CHINA.ORG讨论区 - 语义网·描述逻辑·本体·RDF·OWL  (http://bbs.xml.org.cn/index.asp)
--  『 Web Services & Semantic Web Services 』  (http://bbs.xml.org.cn/list.asp?boardid=10)
----  [新闻]微软声称不会支持SAML 2.0  (http://bbs.xml.org.cn/dispbbs.asp?boardid=10&rootid=&id=24425)


--  作者:admin
--  发布时间:11/18/2005 8:51:00 PM

--  [新闻]微软声称不会支持SAML 2.0
http://www.infoworld.com/article/05/11/17/HNmssaml2support_1.html

Microsoft says it won't support SAML 2.0

Microsoft backs WS-Federation protocols for next generation of message-based apps

By Jeremy Kirk, IDG News Service
November 17, 2005

Microsoft (Profile, Products, Articles) will stick by the set of protocols it has picked for identity federation, a concept that includes single sign-on (SSO) for several different Web portals and secure transfers of data between partnered businesses.

Microsoft has backed WS-Federation protocols for the next generation of message-based applications because it offers a full suite of security, message, and transaction protocols, said Don Schmidt, senior program manager for Microsoft's Identity and Access group. The company's stance is not about which protocol set is necessarily better but rather which offers a wider flexibility in accommodating federated identity, he said.

Schmidt gave a session Thursday on ADFS (Active Directory Federation Services), Microsoft's software for federated identity, at Microsoft's IT Forum 2005 in Barcelona.

The WS-Federation protocols compete with the SAML (Security Assertion Markup Language) 2.0 specification, which so far has strong footing in the race to create secured identity federation across organizations. SAML 2.0 is backed by consortiums such as the Liberty Alliance and the Organization for the Advancement of Structured Information Standards (OASIS).

SAML 2.0 protocols are fine for strictly Web single sign-on, Schmidt said. But the WS-Federation protocols are better equipped to deal with a distributed Web services environment for message reliability, transaction support and security, he said. SAML 2.0 does not have reliable messaging or transaction support, he said.

The problem for businesses is when they want to federate but have chosen a different set of protocols. Vendors are developing translators between the two standards, but Schmidt said those potentially could have a security problem since there a middle point where the data is processed, although he said he believes those systems will improve.

Microsoft will soon start shipping "a whole lot" of servers use WS-Federation protocols, and those client computers will be compatible, Schmidt said.


--  作者:别人的眼泪
--  发布时间:12/15/2005 11:11:00 AM

--  
在站长是版主的时候,俺就是你的粉丝了,恭喜收到offer


W 3 C h i n a ( since 2003 ) 旗 下 站 点
苏ICP备05006046号《全国人大常委会关于维护互联网安全的决定》《计算机信息网络国际联网安全保护管理办法》
62.500ms