Authentication Context Classes for Levels of Assurance for the Swedish eid Framework



Similar documents
Registry for identifiers assigned by the Swedish e- identification board

Server based signature service. Overview

Registry for identifiers assigned by the Swedish e- identification board

Certificate profile for certificates issued by Central Signing services

Appendix 1 Technical Requirements

Sometimes it's better to be STUCK! SAML Transportation Unit for Cryptographic Keys

Digital Signature Web Service Interface

SAML Federated Identity at OASIS

STUDY ON IMPROVING WEB SECURITY USING SAML TOKEN

SAML Security Analysis. Huang Zheng Xiong Jiaxi Ren Sijun

Copyright 2012, Oracle and/or its affiliates. All rights reserved.

On Breaking SAML: Be Whoever You Want to Be

EUROPEAN MIDDLEWARE INITIATIVE

Security Assertion Markup Language (SAML) Site Manager Setup

SAML:The Cross-Domain SSO Use Case

Security Assertion Markup Language (SAML)

Feide Integration Guide. Technical Requisites

SAML V2.0 Asynchronous Single Logout Profile Extension Version 1.0

Interoperable, Federated Identity Management Frameworks Across Enterprise Architectures. We can do this.

Identity, Privacy, and Data Protection in the Cloud XACML. David Brossard Product Manager, Axiomatics

Trend of Federated Identity Management for Web Services

The Florida Department of Education s Single Sign-On Solution. July - August 2012

Introducing Shibboleth

Identity Federation For Authenticating and Authorizing Researchers

On Breaking SAML: Be Whoever You Want to Be OWASP The OWASP Foundation Juraj Somorovsky and Christian Mainka

Federated Identity Management and Shibboleth. Noreen Hogan Asst. Director Enterprise Admin. Applications

Secure Semantic Web Service Using SAML

Authentication Context for the OASIS Security Assertion Markup Language (SAML) V2.0

Single Sign On (SSO) Implementation Manual. For Connect 5 & MyConnect Sites

Identity and Access Management for Federated Resource Sharing: Shibboleth Stories

This Working Paper provides an introduction to the web services security standards.

Securing Web Services With SAML

An Introduction to SCIM: System for Cross-Domain Identity Management

OpenSSO: Cross Domain Single Sign On

OIOSAML Rich Client to Browser Scenario Version 1.0

OASIS Open Reputation Management Systems (ORMS) Technical Committee

Security in B2B. Sami Tähtinen FRENDS Technology, Inc. S Security of Communication Protocols January 28 th, 2003

[MS-SAMLPR]: Security Assertion Markup Language (SAML) Proxy Request Signing Protocol Specification

Test Plan for Liberty Alliance SAML Test Event Test Criteria SAML 2.0

Greg Giles, Cisco Systems. Is compression a valid candidate for a standard?

Research and Implementation of Single Sign-On Mechanism for ASP Pattern *

IVOA Single-Sign-On Profile: Authentication Mechanisms Version 2.0

SAML Security Assertion Markup Language

Federation Are We Ready? Alec Cartwright Authentication Common Capability Design Authority

Proposal for a Regulation on Electronic identification and trust services for electronic transactions in the internal market

SAML and OAUTH comparison

New Single Sign-on Options for IBM Lotus Notes & Domino IBM Corporation

Configuring Single Sign-on from the VMware Identity Manager Service to ServiceNow

Java Security Web Services Security (Overview) Lecture 9

XML Signatures in an Enterprise Service Bus Environment

National Identity Exchange Federation. Web Browser User-to-System Profile. Version 1.0

SAML SSO Configuration

Single Sign-On Implementation Guide

Open Data Center Alliance Usage: Infrastructure as a Service (IaaS) Privileged User Access rev. 1.0

WebLogic Server 7.0 Single Sign-On: An Overview

The Austrian Citizen Card

SAML application scripting guide

Presented By: Muhammad Afzal 08May, 2009

Enabling SAML for Dynamic Identity Federation Management

Run-time Service Oriented Architecture (SOA) V 0.1

Open Data Center Alliance Usage: Single Sign On Authentication REv. 1.0

Web Services Security with SOAP Security Proxies

Standards for Identity & Authentication. Catherine J. Tilton 17 September 2014

2009 Martin v. Löwis. Data-centric XML. Other Schema Languages

Software Design Document SAMLv2 IDP Proxying

Scaling Web Services. W3C Workshop on Web Services. Mark Nottingham. Web Service Scalability and Performance with Optimizing Intermediaries

Siebel CRM On Demand Single Sign-On. An Oracle White Paper December 2006

Web Services Trust and XML Security Standards

SAML Privacy-Enhancing Profile

HP Software as a Service

Simple Cloud Identity Management (SCIM)

Access Control in Distributed Systems. Murat Kantarcioglu

goberlin a Trusted Cloud Marketplace for Governmental and Commercial Services

Extending XACML for Open Web-based Scenarios

Federated Identity Management A Sevan White Paper

Network Security. Chapter 10. Application Layer Security: Web Services. Part I: Introduction to Web Services

By Koji MIYAUCHI* ABSTRACT. XML is spreading quickly as a format for electronic documents and messages. As a consequence,

SAML v2.0 for.net Developer Guide

Assertions and Protocol for the OASIS Security Assertion Markup Language (SAML) V1.1

[MS-SAMLPR]: Security Assertion Markup Language (SAML) Proxy Request Signing Protocol

How To Test For A Signature On A Password On A Webmail Website In Java (For Free)

Interoperable Provisioning in a Distributed World

Microsoft Office 365 Using SAML Integration Guide

Liberty Alliance. CSRF Review. .NET Passport Review. Kerberos Review. CPSC 328 Spring 2009

Authorization-Authentication Using

Web Services Security Standards Forum. Dr. Phillip M. Hallam-Baker C.Eng. FBCS VeriSign Inc.

Assertions and Protocols for the OASIS Security Assertion Markup Language (SAML) V2.0

Cloud Standards. Arlindo Dias IT Architect IBM Global Technology Services CLOSER 2102

Structured Data Capture (SDC) Trial Implementation

Federated Identity Management

The Vetuma Service of the Finnish Public Administration SAML interface specification Version: 3.5

Integrating VMware Horizon Workspace and VMware Horizon View TECHNICAL WHITE PAPER

Structured Data Capture (SDC) Draft for Public Comment

SAML Security Option White Paper

GENERAL OVERVIEW OF VARIOUS SSO SYSTEMS: ACTIVE DIRECTORY, GOOGLE & FACEBOOK

IBM Tivoli Federated Identity Manager V6.2.2 Implementation. Version: Demo. Page <<1/10>>

CAS Protocol 3.0 specification

trust and confidence "draw me a sheep" POLICY AND REGULATION FOR EUROPE

INFORMATION SHARING ENVIRONMENT GUIDANCE (ISE-G) TECHNICAL STANDARD INFORMATION ASSURANCE VERSION 1.0

Open Data Center Alliance Usage: Cloud Based Identity Provisioning Rev. 1.0

Transcription:

Authentication Context Classes for Levels of Assurance for the Swedish eid Framework Version 1.0 2013-07-01 1 (5)

1 INTRODUCTION 3 2 DEFINED AUTHENTICATION CONTEXT CLASSES 3 2.1 LEVEL OF ASSURANCE LEVEL 1 3 2.2 LEVEL OF ASSURANCE LEVEL 2 3 2.3 LEVEL OF ASSURANCE LEVEL 3 4 2.4 LEVEL OF ASSURANCE LEVEL 4 5 3 REFERENCES 5 2 (5)

1 Introduction This specification complements [Eid2Tillit] with definitions of Authentication Context Classes for defined levels of assurance for the Swedish eid framework. These Authentication Context Classes are defined in accordance with Authentication Context for the OASIS Security Assertion Markup Language (SAML) V2.0 [SAML2AuthCont]. Each Authentication Context Class defined in this document includes: A URI Identifier, which identifies the Authentication Context Class as well as the XML Schema name space for corresponding Authentication Context Declarations. The XML Schema for Authentication Context Declarations related to this Authentication Context Class. 2 Defined Authentication Context Classes 2.1 Level of Assurance Level 1 URI identifier: http://id.elegnamnden.se/loa/1.0/loa1 xmlns="http://id.elegnamnden.se/loa/1.0/loa1" targetnamespace="http://id.elegnamnden.se/loa/1.0/loa1" finaldefault="extension" Class identifier: id.elegnamnden.se/loa/1.0/loa1 defines level 1 of the Swedish E-Identification fixed="http://elegnamnden.se/doc/tillitsramverk.pdf#loa1" use="required"/> 2.2 Level of Assurance Level 2 URI identifier: http://id.elegnamnden.se/loa/1.0/loa2 3 (5)

xmlns="http://id.elegnamnden.se/loa/1.0/loa2" targetnamespace="http://id.elegnamnden.se/loa/1.0/loa2" finaldefault="extension" Class identifier: id.elegnamnden.se/loa/1.0/loa2 defines level 2 of the Swedish E-Identification fixed="http://elegnamnden.se/doc/tillitsramverk.pdf#loa2" use="required"/> 2.3 Level of Assurance Level 3 URI identifier: http://id.elegnamnden.se/loa/1.0/loa3 xmlns="http://id.elegnamnden.se/loa/1.0/loa3" targetnamespace="http://id.elegnamnden.se/loa/1.0/loa3" finaldefault="extension" Class identifier: id.elegnamnden.se/loa/1.0/loa3 defines level 3 of the Swedish E-Identification fixed="http://elegnamnden.se/doc/tillitsramverk.pdf#loa3" use="required"/> 4 (5)

2.4 Level of Assurance Level 4 URI identifier: http://id.elegnamnden.se/loa/1.0/loa4 xmlns="http://id.elegnamnden.se/loa/1.0/loa4" targetnamespace="http://id.elegnamnden.se/loa/1.0/loa4" finaldefault="extension" Class identifier: id.elegnamnden.se/loa/1.0/loa4 defines level 4 of the Swedish E-Identification fixed="http://elegnamnden.se/doc/tillitsramverk.pdf#loa4" use="required"/> 3 References [Eid2Tillit] Tillitsramverk för Svensk E-legitimation http://elegnamnden.se/doc/tillitsramverk.pdf [SAML2AuthCont] Authentication Context for the OASIS Security Assertion Markup Language (SAML) V2.0 OASIS Standard, 15 March 2005 http://docs.oasis-open.org/security/saml/v2.0/saml-authn-context-2.0-os.pdf. 5 (5)