Liberty Alliance, Microsoft discuss identity protocols
The Liberty Alliance, a consortium working on policy and technology issues for identity management, is discussing with Microsoft Corp. how to reconcile their competing sets of protocols for secure Web transactions.
"We have finally put down the boxing gloves and are trying to figure out how to solve our customers' problems," said Roger Sullivan, the newly-elected president of the Liberty Alliance and vice president of Oracle Corp.'s identity management section.
The Liberty Alliance, whose participants include Hewlett-Packard Co., Sun Microsystems Inc. and IBM Corp., backs the ID-Web Services Framework (ID-WSF), a set of protocols for Web services. Microsoft supports another set, WS-Star.
The protocols are used for secure information exchanges over the Internet. Eventually, the standards will likely converge, Sullivan said. Microsoft has been "cordial" in discussions with the Liberty Alliance, he said.
"We believe the Web Services Framework from Liberty very well complements the WS-Star protocols," Sullivan said.
But two sets of standards create problems for enterprises who may have already invested in infrastructure, and enterprises may delay identity projects because of confusion, he said.
"We have customers who have deployed WSF, and we need to help them reconcile the two standards stacks so when convergence happens, it will be logical," Sullivan said.
Over the next year, that will mean working with vendors to ensure the transition is smooth and doesn't jeopardize expensive software investments, Sullivan said.
The identity and access management field has been hampered in the past by competing standards protocols, according to a report released last month by analyst IDC.
However, with the protocol standards debate settling, IDC expects the revenue for identity technologies to rise from US$3 billion in 2005 to $5.1 billion in 2010.
A first step towards stability came in 2005, with the ratification of SAML 2.0 (Security Assertion Markup Language), an XML-based framework for exchanging identity information, IDC said. SAML 2.0 was backed by the Liberty Alliance and is now widely used in vendor products.
Standards-based secure Web transactions are seen as key to improving everything from the efficiency of how supply chains operate to simplifying authentication on multiple Web sites.
Organizations, however, are still working on the legal and liability issues surrounding the use of identity management technology. Sullivan said the Liberty Alliance will help by publicizing successful case studies.
Microsoft officials reached in London Wednesday morning could not immediately comment on the discussions.
IDG News Service
Symantec Backup Exec 12 and Backup Exec System Recovery 8 deliver industry leading Windows data protection and system recovery. Download this whitepaper to find out the top reasons to upgrade and how to get continuous data protection and complete system recovery.
Data and system loss — from a hard drive failure, malicious attack, natural disaster, or simple human error — can happen anytime. Don’t leave your business vulnerable. Make sure you have a secure recovery strategy in place. Symantec's latest backup and system recovery technology can efficiently restore critical applications, individual emails and documents and even restore your entire system in minutes in the event of a loss.
Businesses face a growing challenge to ensure that the IT environment is properly protected. Backup Exec 12 integrates with other applications in the Symantec family of products, to complement your current data protection strategy, keep your data securely backed up and make it recoverable when you need it most.
