4 ms·
> Main AAA (Authentication/Auhtorizaation/Accounting) problem is the clould. > How can we federate identity and manage them safely? AWS, and I assume Google's
by jon-wood 11y ago
> Main AAA (Authentication/Auhtorizaation/Accounting) problem is the clould.
> How can we federate identity and manage them safely?
AWS, and I assume Google's stuff, will let you integrate their authentication system with your internal one using SAML to authenticate.
- SFJulie 11y agoSAML is based on SOAP no? SOAP that google dropped for security and overcomplexity concern while security studies tends to say the bigger risk is using system you cannot fully understand, no? It seems to me like modern security by trust in "expert" rather than understanding the basics. But I guess I am wrong in my appreciation?
- windowsworkstoo 11y agoSOAP is just a message format though, so does it matter? SAML works, so long as the implementation is good (assumption, yes)
- SFJulie 11y agoand Oauth is said to be a security framework that can easily go wrong... in its implementation of a solution. there is no concern here neither?
- windowsworkstoo 11y agoDont know, not familiar enough, my point was writing something because it talks in SOAP seems...petty?
- SFJulie 11y agoHell often lies in the details