Presentation on Oasis IDCloud TC at the NIST Cloud Computing Forum III on April 8, 2011

1. www.oasis-open.org
Oasis Identity In The Cloud TC
Towards standardizing Cloud Identity
Anil Saldhana (Red Hat), Co-Chair
Tony Nadalin (Microsoft), Co-Chair

2. Members
Red Hat, IBM, Microsoft, CA Technologies, Cisco
Systems, SAP, EBay, Novell, Ping Identity, Safe Net,
Symantec, Boeing Corp, US DOD, Verisign, Akamai,
Alfresco, Citrix, Cap Gemini, Google, Rackspace,
Axciom, Huawei, Symplified, Thales, Conformity,
Skyworth TTG, MIT, Jericho Systems, PrimeKey,
Aveksa, Mellanox, Vanguard Integrity Professionals,
NZ Govt ...

3. Cloud Identity Management
s Identity Management top security concern
s Not completely solved at enterprise level
q Standards evolving.
s Cloud is a new paradigm
q Same Problems in new packaging.

4. Charter
s Three Stages
q Use Cases Formalization (ETA: May/June 11)
q Gap Analysis of existing IDM standards
s Feed analysis back to the WG responsible for a
standard
q Profiles of Use Cases (ETA: Dec 11)

5. Charter
s Other Objectives
q Do not reinvent the wheel
q Strong liaison relationships with other working
groups internationally
q Glossary of Cloud Identity

6. Use Cases Categorization
s Infrastructure Trust Establishment
q Certificate Services, Signature
Validation,Transaction Validation, Non-
Repudiation.
s Account and Attribute Management
q Provisioning
s General Identity Management
q Infrastructure Identity Management
q Federated Identity Management

7. Use Cases Categorization
s Security Tokens
s Audit and Compliance
s Authentication
q Single Sign On
s Authorization
q Security Policy Enforcement
q RBAC

8. Resources
s Oasis TC Page
http://www.oasis-open.org/committees/id-cloud/
s Oasis TC Wiki
http://wiki.oasis-open.org/id-cloud/FrontPage
s Wiki Page with links to member
submissions
http://wiki.oasis-open.org/id-cloud/MemberSubmissions
s Q&A

9. www.oasis-open.org
Questions
Anil.Saldhana@redhat.com
http://anil-identity.blogspot.com