Comments for Identity Blogger

Comment on SPML and DSML search filters not so hard by Specs, Patterns, and Provisioning | Identity Blogger

Specs, Patterns, and Provisioning | Identity Blogger — Sun, 01 Jan 2012 01:13:40 +0000

[...] to support search filters of arbitrary complexity. I have never considered it that hard and have posted sample code to demonstrate [...]

Comment on Pulling LDAP by Marcus Uy

Marcus Uy — Thu, 21 Jul 2011 06:07:18 +0000

Cool point! My company (and my project) have actually implemented this. Our product uses simpleSAMLphp with our flagship web-portal software to create a slick user and services portal.

One of our configuration options is to use an Active Directory domain as an authentication source instead of our default database back-end. The net result is a SAML-ActiveDirectory bridge.

For the purposes of discussion, this means that I can use Google Apps, with the existing user names and passwords already provisioned in my Windows Domain without exposing my passwords to Google.

I’ve always been a little horrified of the sync-based design they offered by default.

Comment on SPML and DSML search filters not so hard by Vladimir Dumchikov

Vladimir Dumchikov — Mon, 30 May 2011 14:43:07 +0000

Hi,
Nice post, one thing that might be helpful for those who are writing an SPML client. Softerra SPML library can be used for such a case. In fact it is a .NET equivalent of java open SPML.

Comment on SPML and DSML search filters not so hard by Prakash

Prakash — Wed, 29 Dec 2010 20:49:30 +0000

Thanks for posting this. How do i query all users through searchrequest?
example PSP: Sun IdM

Thanks

Comment on Why everything you know about the Metric System is wrong and what it means for Identity Systems by beneficii

beneficii — Sat, 04 Dec 2010 18:27:37 +0000

“Ah, breathe in the Orwellian goodness of that statement. The Metric System is so superior to other forms of measurement it has been mandated on the people by the force of law. All for their own good of course. ”

It’s not Orwellian at all. It has for centuries been recognized that fixing the standard of weights and measures is a legitimate power of government. It’s even in the U.S. Constitution, “The Congress shall have Power…[t]o…fix the Standard of Weights and Measures;…” (Article I, Section 8). It seems that some of the Founders–Thomas Jefferson, Benjamin Franklin, and George Washington especially–wanted us to adopt a proto-metric system, and they expected that Congress would show leadership in its adoption. Here is a good source on that here:

http://metricationmatters.com/docs/USAMetricSystemHistory.pdf

Comment on Yet another abuse by the TSA by Lisa Simeone

Lisa Simeone — Tue, 05 Oct 2010 18:37:04 +0000

Couldn’t agree more. We’re being treated like criminals just for existing, let alone speaking. I’ve been trying to raise awareness about this for a few years over at the Cogblog (link above).

Comment on Federated Provisioning by Fed-Prov and the Cloud: JIT Provisioning to the Rescue? – Talking Identity | Nishant Kaushik's Look at the World of Identity Management

Thu, 03 Jun 2010 20:42:03 +0000

[...] an SPML request. I know work was started (but never completed) on a SAML Profile for SPML, but as Jeff points out, the design center for that was actually Advance Provisioning, not JIT Provisioning. Another [...]

Comment on Federated Provisioning by Advance (Federated) Provisioning and the Cloud – Talking Identity | Nishant Kaushik's Look at the World of Identity Management

Wed, 02 Jun 2010 21:14:22 +0000

[...] or CSV) exchange or via connectors. I do want to point out that it is not just bulk provisioning, as Jeff Bohren suggests, since it supports ad-hoc individual account creation in response to requests for access users make [...]

Comment on Why everything you know about the Metric System is wrong and what it means for Identity Systems by dale olds' virtualsoul » Security, Identity, and Business Drivers at EIC 2010

Tue, 25 May 2010 23:08:07 +0000

[...] It is clearly a better model for humans than separate accounts in every service. However, as Jeff Bohren succinctly said, “Change is hard. Passwords are easy.” More than ever I see trends in cloud computing that are [...]

Comment on iPolice by Blogroll update « code technology

Blogroll update « code technology — Tue, 25 May 2010 18:11:52 +0000

[...] Bohren has some criticism of Apple’s handling of the iPhone 4 reveal by Gizmodo. Seems the ‘iPolice’ [...]