Liberty Alliance touts federated identity management guidelines

According to the consortium, the guidelines are based on the real world experiences of its members who have successfully implemented federated identity systems.

Liberty's Business and Policy Deployment Guidelines, developed by the Alliance's Public Policy Expert Group (PPEG), will be "the first of many" tools and documents to come from the Liberty to provide assistance with this decision framework, the organisation promised.

PPEG member representatives from BIPAC, the US General Services Administration, Oracle and Sun Microsystems spearheaded the development of the deployment guidelines.

Liberty pointed out that policy decision makers need tools to help identify and manage the many business considerations involved in developing such circles of trust, the legal and contractual frameworks governing federation between organisations.

"Policy decision makers around the world continuously point to business, legal and policy concerns as the biggest barriers to implementing industry 'circles of trust' or federations," said Dan Blum, Senior vice president and research director at Burton Group.

Liberty advised that organizations developing circles of trust need to address, among other things, what type of information will be shared among companies, how and when it will be shared, what security procedures will be used to maintain the confidentiality of such information and how participants may join or leave the circle of trust.

The consortium said its guidelines aim to help policy decision managers better manage these issues in order to develop circles of trust more quickly and successfully.

"Companies have a lot to consider as they move to establish circles of trust," said Michael Aisenberg, chair of Liberty's PPEG and director of government relations, VeriSign.

"We've created these guidelines to jump-start the business conversations policy decision managers need to have when creating Circles of Trust and to help organizations learn from our experience in developing open federated identity solutions."

www.projectliberty.org