Category Archives: Federated Identity

Let’s forget about identity

Here’s a radical thought: why don’t we Internet engineers forget about identity? Businesses and individuals...

Identity is not a thing

We think we’re talking about a thing when we refer to identity provisioning, or “Bring...

Surfacing identity

Update 19 May 2014: I changed “assertions” to “attributes” in the body of the blog,...

Memetic engineering our identities

This blog post builds a little further on my ecological ideas about the state of...

Taking stock of the IdM scene

An awkward fracas has broken out in the identity standards community over the process that...

Let’s embrace Identity Plurality

In information security we’ve been saddled for years with the tacit assumption that deep down...

Ski runs and LOAs

In Identity and Access Management, Levels of Assurance (LOAs) are an attempt to harmonise the...

Niche is a better word for it

With the term “ecosystem” being bandied about so much, I started thinking ecologically last year....

Farmers know about silos

Imagine this. Two grain growers are neighbours. One farms wheat and the other corn. Both...

Federation is at odds with infosec best practice – and nature

In modern information security we implore businesses to understand the risks of their particular business...