AssureBridge, Inc. http://www.assurebridge.com Fully Managed Internet Identity Management, Compliance,and SSO Thu, 14 Apr 2016 08:39:35 +0000 en-US hourly 1 Why is Identity Management so difficult http://www.assurebridge.com/blog/2014/04/14/why-is-identity-management-so-difficult/ http://www.assurebridge.com/blog/2014/04/14/why-is-identity-management-so-difficult/#respond Mon, 14 Apr 2014 19:17:22 +0000 http://www.assurebridge.com/?p=2044 Unified/centralized Identity Management is the goal of many if not most organizations.  Let’s consolidate our numerous separate directories and applications under a common, centralized and federated directory to simplify user and rights management.  A large industry has emerged to assist with this task with sophisticated (read expensive) tools.  Yet, after initial, painful forays into consolidating […]

The post Why is Identity Management so difficult appeared first on AssureBridge, Inc..

]]>
http://www.assurebridge.com/blog/2014/04/14/why-is-identity-management-so-difficult/feed/ 0
Enterprise IT Challenges for Terminated Employees http://www.assurebridge.com/blog/2013/06/22/enterprise-it-challenges-for-terminated-employees/ http://www.assurebridge.com/blog/2013/06/22/enterprise-it-challenges-for-terminated-employees/#respond Sat, 22 Jun 2013 14:58:59 +0000 http://www.assurebridge.com/?p=1999 Companies are facing increased pressure to remove employees that have left the company from all computer systems where they may have access to sensitive data. These pressures are coming from a number of sources.  Regulations like the MA201 privacy act and HIPPA are creating strict controls around the protection of customer personal data.  Increasingly, companies […]

The post Enterprise IT Challenges for Terminated Employees appeared first on AssureBridge, Inc..

]]>
http://www.assurebridge.com/blog/2013/06/22/enterprise-it-challenges-for-terminated-employees/feed/ 0
OAuth and SAML: Mobile meets enterprise http://www.assurebridge.com/blog/2013/05/13/oauth-and-saml-mobile-meets-enterprise/ http://www.assurebridge.com/blog/2013/05/13/oauth-and-saml-mobile-meets-enterprise/#respond Mon, 13 May 2013 16:27:18 +0000 http://www.assurebridge.com/?p=1984  OAuth has become the de-facto standard for mobile application authentication.  SAML is the single sign-on mechanism of choice for enterprise web applications.  Why would you need both?  Imagine this common scenario.  You are deploying a cool new mobile application on a Mobile App Server in the cloud. Some of your customers may log into it […]

The post OAuth and SAML: Mobile meets enterprise appeared first on AssureBridge, Inc..

]]>
http://www.assurebridge.com/blog/2013/05/13/oauth-and-saml-mobile-meets-enterprise/feed/ 0
Is OAuth a good protocol for Single Sign-on? http://www.assurebridge.com/blog/2013/05/13/is-oauth-a-good-protocol-for-single-sign-on/ http://www.assurebridge.com/blog/2013/05/13/is-oauth-a-good-protocol-for-single-sign-on/#respond Mon, 13 May 2013 16:02:29 +0000 http://www.assurebridge.com/?p=1980 I’ve seen a number of posts stating that Open Authorization (OAuth) is not a good/safe/efficient protocol for Single Sign-on (SSO). The main argument is that OAuth is intended for authorization (asking permission to use a resource) rather than authentication (confirming a user is who they say they are). The reality is that before you can […]

The post Is OAuth a good protocol for Single Sign-on? appeared first on AssureBridge, Inc..

]]>
http://www.assurebridge.com/blog/2013/05/13/is-oauth-a-good-protocol-for-single-sign-on/feed/ 0
Key Considerations for Home-Grown ID Synchronization http://www.assurebridge.com/blog/2013/01/22/key-considerations-for-home-grown-id-synchronization/ http://www.assurebridge.com/blog/2013/01/22/key-considerations-for-home-grown-id-synchronization/#respond Wed, 23 Jan 2013 00:36:00 +0000 http://www.assurebridge.com/?p=1622 Most companies that implement SSO need to synchronize the IDs that users will use between systems.  This critical requirement is often seen as an afterthought and implemented via home grown batch scripts that copy the IDs from one system to another.  This can seem simple at first but quickly increases in complexity.  If you are […]

The post Key Considerations for Home-Grown ID Synchronization appeared first on AssureBridge, Inc..

]]>
http://www.assurebridge.com/blog/2013/01/22/key-considerations-for-home-grown-id-synchronization/feed/ 0
Top 10 Pitfalls of Home-Grown SAML Solutions http://www.assurebridge.com/blog/2012/09/27/top-10-pitfalls-of-home-grown-saml-solutions/ http://www.assurebridge.com/blog/2012/09/27/top-10-pitfalls-of-home-grown-saml-solutions/#respond Thu, 27 Sep 2012 18:21:32 +0000 http://www.assurebridge.com/?p=1520 Many companies facing partner pressure to implement SAML compliant SSO solutions and tight project deadlines, often decide to embark on the effort of building their own home-grown implementation.  They typically underestimate the effort and complexity involved, and quickly discover, that even if they are leveraging a SAML library, there are quite a few important issues […]

The post Top 10 Pitfalls of Home-Grown SAML Solutions appeared first on AssureBridge, Inc..

]]>
http://www.assurebridge.com/blog/2012/09/27/top-10-pitfalls-of-home-grown-saml-solutions/feed/ 0
Top 4 challenges of proprietary SSO solutions http://www.assurebridge.com/blog/2012/09/04/top-4-challenges-of-proprietary-sso-solutions/ http://www.assurebridge.com/blog/2012/09/04/top-4-challenges-of-proprietary-sso-solutions/#respond Tue, 04 Sep 2012 15:13:52 +0000 http://www.assurebridge.com/?p=1443 Firms of all sizes often choose to implement their own Single Sign-On systems to facilitate internet connections with their B2B partners and SaaS applications.  Very often these solutions include duplicate storage and synchronization of user credentials (e.g. user names and passwords) as well as more complex proprietary token passing mechanisms. Such security management solutions are […]

The post Top 4 challenges of proprietary SSO solutions appeared first on AssureBridge, Inc..

]]>
http://www.assurebridge.com/blog/2012/09/04/top-4-challenges-of-proprietary-sso-solutions/feed/ 0
Diagnosing Single Sign-on Issues http://www.assurebridge.com/blog/2012/06/28/diagnosing-single-sign-on-issues/ http://www.assurebridge.com/blog/2012/06/28/diagnosing-single-sign-on-issues/#respond Fri, 29 Jun 2012 02:04:41 +0000 http://www.assurebridge.com/?p=1361 From the user’s point of view, it’s simple.  Click on a link, and then see a page.  Under the hood, single sign-on is a complicated operation. The example below shows that this single click can involve up to four web sites and six browser redirects.  Normally, this all happens in milliseconds, but when something goes […]

The post Diagnosing Single Sign-on Issues appeared first on AssureBridge, Inc..

]]>
http://www.assurebridge.com/blog/2012/06/28/diagnosing-single-sign-on-issues/feed/ 0
SAML vs. WS-Federation for Single Sign-On http://www.assurebridge.com/blog/2012/06/28/saml-vs-ws-federation-for-single-sign-on/ http://www.assurebridge.com/blog/2012/06/28/saml-vs-ws-federation-for-single-sign-on/#respond Fri, 29 Jun 2012 01:47:40 +0000 http://www.assurebridge.com/?p=1352 Two very popular standards for single sign-on are Security Assertion Markup Language (SAML) and Web Services Federation Language (WS-Federation).  They are very similar but also incompatible.  What’s the difference?  Which one should you use?  What are some of the common pitfalls? SAML and WS-Federation are both standards that allow users that have already logged into […]

The post SAML vs. WS-Federation for Single Sign-On appeared first on AssureBridge, Inc..

]]>
http://www.assurebridge.com/blog/2012/06/28/saml-vs-ws-federation-for-single-sign-on/feed/ 0
What do you mean SSO? http://www.assurebridge.com/blog/2012/06/26/what-do-you-mean-sso/ http://www.assurebridge.com/blog/2012/06/26/what-do-you-mean-sso/#respond Tue, 26 Jun 2012 18:32:05 +0000 http://www.assurebridge.com/?p=1328 Ask three people in technology what they mean by single sign-on and you are likely to get three different answers.  Single sign-on encompasses a variety of business problem.  When discussing single sign-on solutions, it is important to make sure everyone is on the same page.  Here is my list of key terms to help center […]

The post What do you mean SSO? appeared first on AssureBridge, Inc..

]]>
http://www.assurebridge.com/blog/2012/06/26/what-do-you-mean-sso/feed/ 0