Identity in the browser at 5. Lessons learned. Paul Trevithick - PowerPoint PPT Presentation

Jun 04, 2023 •220 likes •349 views

Identity in the browser at 5. Lessons learned. Paul Trevithick paul@azigo.com informationcard.net higgins-project.org Tuesday, May 24, 2011 Infocard in 60 seconds flat Tuesday, May 24, 2011 Click: Card picker window appears Tuesday, May 24,

Identity in the browser at 5. Lessons learned. Paul Trevithick paul@azigo.com informationcard.net higgins-project.org Tuesday, May 24, 2011
Infocard in 60 seconds flat Tuesday, May 24, 2011
Click: Card picker window appears Tuesday, May 24, 2011
User clicks on a card Tuesday, May 24, 2011
User authenticates to card/IdP Tuesday, May 24, 2011
Token is retrieved and HTTPS POST-ed to site Tuesday, May 24, 2011
Good & bad • We got it right from the start • We got it wrong at first but eventually got it right • We still haven’t got it right Tuesday, May 24, 2011
Capabilities • User-centric and decentralized architecture • Claims (attributes) not identifiers • Self-asserted and third-party asserted claims • Extensible schema • Claims as URIs • End-to-end crypto, audience restriction, verified claims • Separation of token format from network protocol • Browser-initiated (not SP-initiated) flow; anti-phishing protection • Passive advertisement of website policy • Privacy: minimal disclosure, pseudonym generation Tuesday, May 24, 2011
User Experience • Support for multiple identities (cards) • Automatic card matching & filtering (no more NASCAR) • Roaming support • Cross-browser, cross-platform (including mobile) • Unmodified browser support • Cross-protocol: should have invested more in building bridges • Finding the right balance • Transparency, notice & consent vs. usability • Performance vs. security Tuesday, May 24, 2011
User Experience • Dynamic claims (e.g. for payment use-cases) • Claims aggregation • Attribute/claim providers vs. identity providers Tuesday, May 24, 2011
Driving adoption • Put majority of resources on winning SPs/RPs (not IdPs) • Avoid having a single, dominant vendor in the ecosystem Tuesday, May 24, 2011

Recommend

Lessons Learned Lessons Learned From From Lessons Learned Lessons Learned From From

Protg 2006, July 26th, Stanford I R I S A C 1 R E C Saint-Cyr Lessons Learned Lessons Learned From From Lessons Learned Lessons Learned From From Ontology Ontology Design Design Ontology Ontology Design Design Jean Andr B

371 views • 12 slides

The Nexus of Identity IBM's submission for the W3C Identity in the Browser Workshop by

The Nexus of Identity IBM's submission for the W3C Identity in the Browser Workshop by Maryann Hondo, Mary Ellen Zurko, Matthew Flaherty, Paula K. Austel, Sridhar Muppidi Net - net of the paper Our customers expect us to give them the

558 views • 9 slides

Identity in the Browser 2011 Michael Hanson, Dan Mills, Ben Adida A quick history - current and

Identity in the Browser 2011 Michael Hanson, Dan Mills, Ben Adida A quick history - current and proposed browser identity features Password store & sync Account Manager authentication and session metaprotocol Contacts API

483 views • 10 slides

Strong Authen,ca,on In and Beyond the Browser Lessons

Strong Authen,ca,on In and Beyond the Browser Lessons Learned from FIDO Brad Hill, PayPal, brad.hill@paypal.com Jeff Hodges, PayPal,

322 views • 8 slides

Identity in the Browser -or- Putting the Cart Before the Horse? Andy Steingruebl and Jeff

Identity in the Browser -or- Putting the Cart Before the Horse? Andy Steingruebl and Jeff Hodges {asteingruebl,jeff.hodges}@paypal.com PayPal Information Risk Management Position Paper for W3C Workshop on Identity in the Browser May 24

413 views • 9 slides

bringing change to life lessons learned at netflix & paypal Bill Scott VP, Consumer &

1.07k views • 68 slides

Institutionalizing Lessons Learned October 25, 2006 Loren Plisco Region II Background

Institutionalizing Lessons Learned October 25, 2006 Loren Plisco Region II Background SEP 2002 Davis-Besse Lessons Learned Task Force AUG 2004 - Effectiveness Review Lessons Learned Task Force JAN 2005 - EDO Charters

269 views • 22 slides

Contextual Access and Multi-Factor Authentication Lessons learned on getting past single-factor

Conference 2018 Contextual Access and Multi-Factor Authentication Lessons learned on getting past single-factor authentication! Panelists Corey Scholefield - Team Lead, Identity Services Wendy Blake Director, Network and Technical Services

519 views • 33 slides

OSHA Lessons Learned Adam Fries OSHA Compliance Officer February 13, 2018 OSHA Lessons Learned

OSHA Lessons Learned Adam Fries OSHA Compliance Officer February 13, 2018 OSHA Lessons Learned Jobsite Safety and Health Inspections/Audits better known as; PAPER WORK You hate it, Your safety director requires it, OSHA loves it, Does it

926 views • 35 slides

3/8/2019 Epidemiology, Risk Factors, and Outcomes of Pediatric PVD: LESSONS learned from the

3/8/2019 Epidemiology, Risk Factors, and Outcomes of Pediatric PVD: LESSONS learned from the Spanish Registry: Lessons Learned from the Registries o Is It possible (and worthy) to do a national registry? Lessons learned from the o

1.16k views • 43 slides

DEBUGGING LESSONS LEARNED WHILE DEBUGGING LESSONS LEARNED WHILE FIXING NETBSD FIXING NETBSD

DEBUGGING LESSONS LEARNED WHILE DEBUGGING LESSONS LEARNED WHILE FIXING NETBSD FIXING NETBSD ABOUT ME ABOUT ME maya@NetBSD.org coypu@sdf.org NetBSD/pkgsrc for the last 3 years THIS TALK THIS TALK Mix of a bunch of bugs Not solo work

695 views • 31 slides

Lessons Learned A Value Added Product of the Project Life Cycle R Gilman April 19, 2006 Agenda

Lessons Learned A Value Added Product of the Project Life Cycle R Gilman April 19, 2006 Agenda Introduction What are Lessons Learned? Value to the Project Process and Organization Keanes Approach to Lessons Learned Keys to

261 views • 24 slides

Four Major Events in Our History and the Lessons Learned Coleen Reiswig, Isobel McDonald, Ted

Four Major Events in Our History and the Lessons Learned Coleen Reiswig, Isobel McDonald, Ted Pincock, Carolyn Bouchard Joanne Archer Outline: 1) Common Themes 2) The Event and lessons learned: Spanish Influenza 1918 SARS

417 views • 38 slides

Lessons Learned from Japans NPL Experience Ladies and gentlemen, today I would like to discuss

Beijing International Finance Forum Chairman Junichi Ujiie 2004/05/19 Lessons Learned from Japans NPL Experience Ladies and gentlemen, today I would like to discuss the lessons to be learned from Japans NPL problems: first, the disposal

344 views • 3 slides

Some lessons learned from Team Science Some lessons learned from Team Science Lewis Cantley Weill

Some lessons learned from Team Science Some lessons learned from Team Science Lewis Cantley Weill Cornell Medical College, New York Presbyterian Hospital Past participation in Team Science Period Period Type of grant Type of grant Role in Grant

380 views • 20 slides

MDG-SDG TRANSITION IN IVORY COAST: LESSONS LEARNED AND IMPLICATIONS ON CURRENT PUBLIC POLICIES

MDG-SDG TRANSITION IN IVORY COAST: LESSONS LEARNED AND IMPLICATIONS ON CURRENT PUBLIC POLICIES SAKO G. . Oumar CONTENTS I. Context II. Assessment and lessons learned from implemention of MDGs III. Domestication/contextaulisation of SDGs

151 views • 12 slides

VALUE: Lessons Learned Kate McConnell & Erin Horan Association of American Colleges and

VALUE: Lessons Learned Kate McConnell & Erin Horan Association of American Colleges and Universities Todays session Overview of the MSC Scoring and reporting Lessons learned as related to validity Unintended consequences?

661 views • 40 slides

FACILITATED BY: Robin Booth, CPA 2 Training Topics Lessons Learned Best Practices

Office of Housing Counseling Best 9/20/2016 Practices/Lessons Learned - LHCAs U.S. Department of Housing and Urban Development Office of Housing Counseling Best Practices/Lessons Learned LHCAs September 20, 2016 12:00 PM Eastern Standard

569 views • 9 slides

Lessons learned - viewpoints on increasing analytical capabilities Elizabeth Riczko, FCAS,

Lessons Learned 3/22/2011 Lessons learned - viewpoints on increasing analytical capabilities Elizabeth Riczko, FCAS, MAAA, CPCU 1 What are we doing? 2 It starts with a goal NOT a method A business question Ask why (and repeat)

338 views • 10 slides

MTN-001 Menu Lessons Learned Patrick Karugaba MU-JHU Core Lab, Kampala Uganda Objectives

MTN-001 Menu Lessons Learned Patrick Karugaba MU-JHU Core Lab, Kampala Uganda Objectives Introduction Identifying strength & resources at our disposal. Enumeration of challenges/tasks Lessons learned Conclusion

614 views • 13 slides

Lessons Learned (the Hard Way) in an Organization from Predictive Modeling Projects Predictive

Lessons Learned: Viewpoints on Increasing Analytical Capabilities Lessons Learned (the Hard Way) in an Organization from Predictive Modeling Projects Predictive Modeling Projects from a Company Perspective Greg Hansen, FCAS, MAAA Actuarial

349 views • 18 slides

SPP Integrated Marketplace Day 2 Market Lessons Learned & Project Approach Bill Clarke

SPP Integrated Marketplace Day 2 Market Lessons Learned & Project Approach Bill Clarke Tyler Wolford Jon Sunneberg June 22, 2011 Agenda Introduction Day 2 Market Lessons Learned Operations Trading Tools &

1.4k views • 65 slides

Defining the road ahead Lessons learned from the National Action Plans on ASGM PROGRAMME

Defining the road ahead Lessons learned from the National Action Plans on ASGM PROGRAMME Openingremarksand presentation of the global progress UNEP UNIDO Sharing national experience and lessons learned Uganda Ecuador WHO Artisanal Gold

387 views • 37 slides

NSTIC, Privacy and Social Login Presentation at the W3C Workshop on Identity in the Browser

NSTIC, Privacy and Social Login Presentation at the W3C Workshop on Identity in the Browser Francisco Corella and Karen P. Lewison Pomcor 1 05/03/2011 Pomcor Getting Rid of Passwords n is one long term goal of NSTIC n But it may

255 views • 7 slides