Henryk at 06:25, 31 August 2005

2005-08-31T06:25:38Z

New page

'''Identity Federation''' is the process of creating associations between different accounts belonging to the same principal, usually on different systems. It's a core part of the [[Liberty Alliance]] specifications.

==Example==
For an example let's assume that Alice has accounts with her bank and her favourite discussion forum. On her bank's website she is identified by her account number <var>0815F00B4R</var> while she's registered with her email address <var>alice@wonderland.example</var> on the discussion forum. Let's suppose that both systems support the Identity Federation Framework (ID-FF) standards where the banking system acts as the Identity Provider (IdP) while the forum system is a Service Provider (SP).

Through Identity Federation Alice can then associate both accounts. During this process the bank creates an opaque identifier for Alice that is communicated to the forum software where it will be associated with Alice's account. Note that there is no more information in this identifier than "This is the same principal that completed the identity federation procedure", especially Alice's bank account number will not become known to the forum system.

After the federation took place Alice might take advantage of the [[Single Sign-On]] service: She only needs to log in on her bank's website and will also be able to be recognized by the forum website.

Identity Federation - Revision history

Henryk at 06:25, 31 August 2005