ArisID Open Source Software Implements Liberty Identity Governance Framework (IGF)

OpenLiberty.org Releases First Open Source Identity Governance Framework Software

Multi-Protocol ArisID Enables Developers to Create Applications that Obtain Identity Data Utilizing Declarative Identity Governance Framework Policies

Wednesday, November 19, 2008. [References]

OpenLiberty.org, the global open source community working to provide developers with resources and support for building interoperable identity-enabled services for enterprises and people, today announced the release of ArisID, the first open source software implementing Liberty Identity Governance Framework (IGF) components. The ArisID API provides enterprise developers and system architects with a library for building enterprise-grade identity-enabled applications using multiple identity protocols, and lays the groundwork for allowing enterprises to manage and audit the identity requirements of business applications based on declarative IGF policy specifications. OpenLiberty.org will hold a public webcast to review the developer and business benefits of ArisID at 8:00am US PT (5:00PM CET) on Thursday, December 11, 2008.

The ArisID API implements the CARML (Client Attribute Requirements Markup Language) and Privacy Constraints IGF specifications Liberty Alliance released earlier this year. ArisID demonstrates how CARML and Privacy Constraints policies may be used by developers to create declarative identity applications. The open source ArisID declarative approach defines what identity-enabled transactions can be performed to ensure applications only use identity information required to complete a transaction. This allows developers to build secure identity-enabled enterprise applications that are easily auditable and protect the personally identifiable information (PII), such as a social security number or credit information, of people engaging in enterprise identity-enabled transactions.

ArisID is the first release from the Aristotle Project, an open source community working within OpenLiberty.org focused on developing a single open source API for existing identity technologies. The goal of the project is to create an open source multi-protocol programming interface and multiple ArisID information providers to allow developers to access, update, and use identity data leveraging any identity protocol and IGF privacy and security policies. With today's release, developers can use ArisID to begin working with applications leveraging SQL databases and LDAP Directories, with additional releases planned for federation protocols such as SAML, Liberty Identity Web Services (ID-WSF), OpenID, and WS-Trust.

"The release of the declarative ArisID API is an important development in the evolution of open source identity-enabled systems based on IGF security and privacy policies," said Brett McDowell, executive director, Liberty Alliance. "With the ArisID API, system architects and enterprise developers now have open source enterprise-grade software to begin building IGF-based applications and products."

Collaboratively Fostering Declarative Identity Services and Providers

The growing Aristotle Project community is working under the philosophy that storage of identity information in a single repository or by a specific vendor will not meet the needs of all applications. In the real world, there may be multiple valid sources of identity information that must be accessed by one or many identity service protocols, often chosen by the end-user or the enterprise running the application. The multi-protocol ArisID API allows developers to create a single declarative application that can leverage all of the identity sources across the extended enterprise. This simplifies the development process, increases flexibility and allows enterprises to evaluate the use of identity information for both privacy and network service requirements.

"Qualcomm leverages a mix of commercial, open source and home-built applications to support multiple businesses and advanced engineering processes. Applications must be flexible, process integrated and highly collaborative, but also subject to sophisticated and uniform security policy," said Steven Polaski, senior director of information technology and chief architect, Qualcomm. "We view uptake of Liberty's IGF and availability of open reference implementations as necessary steps to reduce the expense and complexity of 'identity wiring' applications to identity services and enterprise policy."

With today's news, Project Aristotle has made a preview of an ArisID information provider available at OpenLiberty.org. Members of the Aristotle Project are also working with the open source community, the global identity industry and identity vendors to develop additional ArisID information providers. All individuals and organizations interested in collaborating on the further development of ArisID information providers and declarative open source identity systems are encouraged to join the Project Aristotle community at OpenLiberty.org

"The ArisID API can address a number of identity issues plaguing IT architects, application developers, and auditors," said Gerry Gebel, vice president and service director at Burton Group. "CARML and the other IGF components offer more transparency regarding the use of potentially sensitive data, moves application architecture toward an approach that externalizes security from the business logic, as well as providing a services-style interface that abstracts away the complexity of underlying identity repositories."

About the December 11, 2008 ArisID Webcast

Hosted by Phil Hunt, Aristotle Project lead with OpenLiberty.org, the one-hour public session will provide participants with an overview of the ArisID API, discuss benefits for developers and enterprises, and review the Project Aristotle roadmap. Developers will understand how to begin using ArisID to build IGF-based applications and the identity community and vendors will gain insight into how the open source ArisID API and information providers help fulfill multi-protocol identity management requirements. More information and registration for the webcast is available at http://tinyurl.com/62g8gr.

About the Liberty Identity Governance Framework

The Liberty Identity Governance Framework is the industry's first programmatic and auditable open standards-based initiative designed to help organizations better govern and protect identity-related information. The IGF helps organizations meet regulatory requirements such as the European Data Protection Initiative, Gramm-Leach-Bliley Act, PCI Security Standard and Sarbanes-Oxley by allowing enterprises to more easily determine and control how identity information is used, stored and propagated across diverse systems, helping to ensure the information is easily auditable and not abused, compromised or misplaced. IGF is being developed within the Liberty Alliance Technology Expert Group and by the OpenLiberty.org community to ensure the widest possible collaboration in the development of IGF specifications.

About OpenLiberty.org

OpenLiberty.org is an open community of developers formed in January 2007 to coordinate synergies among global open source initiatives and to identify and deliver the open source libraries developers need to build applications that take advantage of the features in Liberty Alliance standards. While Liberty Alliance sponsors many of its activities, OpenLiberty.org is a self-governing community operating independently of Liberty Alliance. More information is available at OpenLiberty.org.

References

Aristotle:

Announcing Project Aristotle. Phil Hunt. Blog. November 19, 2008. "...there has been a lot of work going on at OpenLiberty to design a new 'declarative' API that enables application developers to write applications that consume, and manage identity information in a way that allows infrastructure components take care of all the nasty problems like 'Which protocol to use'... ArisID demonstrates how CARML and Privacy Constraints policies may be used by developers to create declarative identity applications. The open source ArisID declarative approach defines what identity-enabled transactions can be performed to ensure applications only use identity information required to complete a transaction. This allows developers to build secure identity-enabled enterprise applications that are easily auditable and protect the personally identifiable information (PII), such as a social security number or credit information, of people engaging in enterprise identity-enabled transactions..."

Project Aristotle. "Project Aristotle is about creating a high-level general purpose application programming interface that enables application developers to access, update, and use Identity information in a privacy respectful, secure, and multi-protocol capable set of application program interfaces."

Project Aristotle at SourceForge. "ArisId contains the main transactional API for accessing identity services using CARML declarations. Consult the Javadoc and tutorials to understand how to use the API. A beans representation is available (ArisIdBeans). This library works the arisId library to generate java beans based on a CARML declaration file."

Project Aristotle FAQ document. "ArisID de-couples developers from having to make protocol, schema, and architecture decisions that would limit the usability and deployability of their application in an evolving and ever complex enterprise network, where a large number of identity sources and protocols are used. By relying on intelligent ArisID libraries, developers can now ensure maximum flexibility and use of their applications while significantly reducing development time...."

Project Aristotle Architecture. "Project Aristotle grew out of the Identity Governance Framework (IGF) standards the Liberty Alliance Project has published and is still working on. The objective was to demonstrate a methodology for using CARML (Client Attribute Requirements Markup Language) and WS-Policy Privacy Constraints in connection with popular identity protocols such as LDAP, SAML, WS-Trust, ID-WSF, and others. The Identity Governance Framework is about enabling the secure and appropriate exchange of identity-related information between users and applications and service providers (both internal and external) is the basis of providing deeper and richer functionality for services oriented architecture. Sensitive identity-related data such as addresses, social security numbers, bank account numbers and employment details are increasingly the target of legal, regulatory and enterprise policy. These include,but are not limited to: the European Data Protection Initiative, Sarbanes-Oxley, and Gramm-Leach-Bliley as examples..."

Oracle OVD Provider for ArisID — Developer Preview. "The OVD Provider for ArisID is a library that enables Oracle OVD to provide identity services to an application using the ArisID API. Thus Oracle OVD plus the OVD Provider library for ArisID and the ArisID API library comprise a complete set of libraries that can be used by applications to access identity services."

Webcast: ArisID — Library of Open Source Solutions for Rapid Identity Governance Framework Development to Meet Compliance Demands — "This webcast will provide participants with an overview of the ArisID API, discuss benefits for developers and enterprises, and review the project roadmap. Developers will understand how to begin using ArisID to build IGF-based applications and the identity community and vendors will gain insight into how the open source ArisID API and information providers help fulfill multi-protocol identity management requirements."

Liberty IGF:

Liberty Identity Governance Framework (IGF)

Liberty Alliance Identity Governance Framework (IGF) 1.0 Specifications

"Applying the Identity Governance Framework." By Phil Hunt. Director, Oracle Identity Management Standards.

Prepared by Robin Cover for The XML Cover Pages archive. See also "Liberty Alliance Specifications for Federated Network Identification and Authorization."

SEARCH Advanced Search ABOUT Site Map CP RSS Channel Contact Us Sponsoring CP About Our Sponsors NEWS Cover Stories Articles & Papers Press Releases CORE STANDARDS XML SGML Schemas XSL/XSLT/XPath XLink XML Query CSS SVG TECHNOLOGY REPORTS XML Applications General Apps Government Apps Academic Apps EVENTS LIBRARY Introductions FAQs Bibliography Technology and Society Semantics Tech Topics Software Related Standards Historic	ArisID Open Source Software Implements Liberty Identity Governance Framework (IGF) OpenLiberty.org Releases First Open Source Identity Governance Framework Software Multi-Protocol ArisID Enables Developers to Create Applications that Obtain Identity Data Utilizing Declarative Identity Governance Framework Policies Wednesday, November 19, 2008. [References] OpenLiberty.org, the global open source community working to provide developers with resources and support for building interoperable identity-enabled services for enterprises and people, today announced the release of ArisID, the first open source software implementing Liberty Identity Governance Framework (IGF) components. The ArisID API provides enterprise developers and system architects with a library for building enterprise-grade identity-enabled applications using multiple identity protocols, and lays the groundwork for allowing enterprises to manage and audit the identity requirements of business applications based on declarative IGF policy specifications. OpenLiberty.org will hold a public webcast to review the developer and business benefits of ArisID at 8:00am US PT (5:00PM CET) on Thursday, December 11, 2008. The ArisID API implements the CARML (Client Attribute Requirements Markup Language) and Privacy Constraints IGF specifications Liberty Alliance released earlier this year. ArisID demonstrates how CARML and Privacy Constraints policies may be used by developers to create declarative identity applications. The open source ArisID declarative approach defines what identity-enabled transactions can be performed to ensure applications only use identity information required to complete a transaction. This allows developers to build secure identity-enabled enterprise applications that are easily auditable and protect the personally identifiable information (PII), such as a social security number or credit information, of people engaging in enterprise identity-enabled transactions. ArisID is the first release from the Aristotle Project, an open source community working within OpenLiberty.org focused on developing a single open source API for existing identity technologies. The goal of the project is to create an open source multi-protocol programming interface and multiple ArisID information providers to allow developers to access, update, and use identity data leveraging any identity protocol and IGF privacy and security policies. With today's release, developers can use ArisID to begin working with applications leveraging SQL databases and LDAP Directories, with additional releases planned for federation protocols such as SAML, Liberty Identity Web Services (ID-WSF), OpenID, and WS-Trust. "The release of the declarative ArisID API is an important development in the evolution of open source identity-enabled systems based on IGF security and privacy policies," said Brett McDowell, executive director, Liberty Alliance. "With the ArisID API, system architects and enterprise developers now have open source enterprise-grade software to begin building IGF-based applications and products." Collaboratively Fostering Declarative Identity Services and Providers The growing Aristotle Project community is working under the philosophy that storage of identity information in a single repository or by a specific vendor will not meet the needs of all applications. In the real world, there may be multiple valid sources of identity information that must be accessed by one or many identity service protocols, often chosen by the end-user or the enterprise running the application. The multi-protocol ArisID API allows developers to create a single declarative application that can leverage all of the identity sources across the extended enterprise. This simplifies the development process, increases flexibility and allows enterprises to evaluate the use of identity information for both privacy and network service requirements. "Qualcomm leverages a mix of commercial, open source and home-built applications to support multiple businesses and advanced engineering processes. Applications must be flexible, process integrated and highly collaborative, but also subject to sophisticated and uniform security policy," said Steven Polaski, senior director of information technology and chief architect, Qualcomm. "We view uptake of Liberty's IGF and availability of open reference implementations as necessary steps to reduce the expense and complexity of 'identity wiring' applications to identity services and enterprise policy." With today's news, Project Aristotle has made a preview of an ArisID information provider available at OpenLiberty.org. Members of the Aristotle Project are also working with the open source community, the global identity industry and identity vendors to develop additional ArisID information providers. All individuals and organizations interested in collaborating on the further development of ArisID information providers and declarative open source identity systems are encouraged to join the Project Aristotle community at OpenLiberty.org "The ArisID API can address a number of identity issues plaguing IT architects, application developers, and auditors," said Gerry Gebel, vice president and service director at Burton Group. "CARML and the other IGF components offer more transparency regarding the use of potentially sensitive data, moves application architecture toward an approach that externalizes security from the business logic, as well as providing a services-style interface that abstracts away the complexity of underlying identity repositories." About the December 11, 2008 ArisID Webcast Hosted by Phil Hunt, Aristotle Project lead with OpenLiberty.org, the one-hour public session will provide participants with an overview of the ArisID API, discuss benefits for developers and enterprises, and review the Project Aristotle roadmap. Developers will understand how to begin using ArisID to build IGF-based applications and the identity community and vendors will gain insight into how the open source ArisID API and information providers help fulfill multi-protocol identity management requirements. More information and registration for the webcast is available at http://tinyurl.com/62g8gr. About the Liberty Identity Governance Framework The Liberty Identity Governance Framework is the industry's first programmatic and auditable open standards-based initiative designed to help organizations better govern and protect identity-related information. The IGF helps organizations meet regulatory requirements such as the European Data Protection Initiative, Gramm-Leach-Bliley Act, PCI Security Standard and Sarbanes-Oxley by allowing enterprises to more easily determine and control how identity information is used, stored and propagated across diverse systems, helping to ensure the information is easily auditable and not abused, compromised or misplaced. IGF is being developed within the Liberty Alliance Technology Expert Group and by the OpenLiberty.org community to ensure the widest possible collaboration in the development of IGF specifications. About OpenLiberty.org OpenLiberty.org is an open community of developers formed in January 2007 to coordinate synergies among global open source initiatives and to identify and deliver the open source libraries developers need to build applications that take advantage of the features in Liberty Alliance standards. While Liberty Alliance sponsors many of its activities, OpenLiberty.org is a self-governing community operating independently of Liberty Alliance. More information is available at OpenLiberty.org. References Aristotle: Announcing Project Aristotle. Phil Hunt. Blog. November 19, 2008. "...there has been a lot of work going on at OpenLiberty to design a new 'declarative' API that enables application developers to write applications that consume, and manage identity information in a way that allows infrastructure components take care of all the nasty problems like 'Which protocol to use'... ArisID demonstrates how CARML and Privacy Constraints policies may be used by developers to create declarative identity applications. The open source ArisID declarative approach defines what identity-enabled transactions can be performed to ensure applications only use identity information required to complete a transaction. This allows developers to build secure identity-enabled enterprise applications that are easily auditable and protect the personally identifiable information (PII), such as a social security number or credit information, of people engaging in enterprise identity-enabled transactions..." Project Aristotle. "Project Aristotle is about creating a high-level general purpose application programming interface that enables application developers to access, update, and use Identity information in a privacy respectful, secure, and multi-protocol capable set of application program interfaces." Project Aristotle at SourceForge. "ArisId contains the main transactional API for accessing identity services using CARML declarations. Consult the Javadoc and tutorials to understand how to use the API. A beans representation is available (ArisIdBeans). This library works the arisId library to generate java beans based on a CARML declaration file." Project Aristotle FAQ document. "ArisID de-couples developers from having to make protocol, schema, and architecture decisions that would limit the usability and deployability of their application in an evolving and ever complex enterprise network, where a large number of identity sources and protocols are used. By relying on intelligent ArisID libraries, developers can now ensure maximum flexibility and use of their applications while significantly reducing development time...." Project Aristotle Architecture. "Project Aristotle grew out of the Identity Governance Framework (IGF) standards the Liberty Alliance Project has published and is still working on. The objective was to demonstrate a methodology for using CARML (Client Attribute Requirements Markup Language) and WS-Policy Privacy Constraints in connection with popular identity protocols such as LDAP, SAML, WS-Trust, ID-WSF, and others. The Identity Governance Framework is about enabling the secure and appropriate exchange of identity-related information between users and applications and service providers (both internal and external) is the basis of providing deeper and richer functionality for services oriented architecture. Sensitive identity-related data such as addresses, social security numbers, bank account numbers and employment details are increasingly the target of legal, regulatory and enterprise policy. These include,but are not limited to: the European Data Protection Initiative, Sarbanes-Oxley, and Gramm-Leach-Bliley as examples..." Oracle OVD Provider for ArisID — Developer Preview. "The OVD Provider for ArisID is a library that enables Oracle OVD to provide identity services to an application using the ArisID API. Thus Oracle OVD plus the OVD Provider library for ArisID and the ArisID API library comprise a complete set of libraries that can be used by applications to access identity services." Webcast: ArisID — Library of Open Source Solutions for Rapid Identity Governance Framework Development to Meet Compliance Demands — "This webcast will provide participants with an overview of the ArisID API, discuss benefits for developers and enterprises, and review the project roadmap. Developers will understand how to begin using ArisID to build IGF-based applications and the identity community and vendors will gain insight into how the open source ArisID API and information providers help fulfill multi-protocol identity management requirements." Liberty IGF: Liberty Identity Governance Framework (IGF) Liberty Alliance Identity Governance Framework (IGF) 1.0 Specifications "Applying the Identity Governance Framework." By Phil Hunt. Director, Oracle Identity Management Standards. Prepared by Robin Cover for The XML Cover Pages archive. See also "Liberty Alliance Specifications for Federated Network Identification and Authorization."