Privacy and Security Policy Deployment Guidelines

Liberty Alliance Releases Business and Policy Guidelines for Deploying Federated Identity Management

Liberty's First Guidelines for Policy Decision Makers Addressing the Business, Legal, and Privacy Aspects of Federation

Liberty Alliance Project. October 11, 2005.

The Liberty Alliance Project, a global consortium for open federated identity standards and identity-based Web services, today announced the release of business and policy guidelines for helping organizations address and manage the business, legal and privacy challenges of deploying federated identity management. The guidelines have been developed based on the experiences of Liberty members who have implemented federation and serve as a resource for accelerating the wide-scale deployment of federated identity solutions. Liberty will hold a Webcast to discuss the guidelines on Wednesday, October 12th [2005] at 8:00AM US Pacific Time.

With over one billion Liberty-enabled identities and devices expected globally by the end of 2006, Liberty has proven that the technology for deploying successful federation is in place. But Liberty also recognizes that in order to fully leverage the benefits of federation, technology alone is not enough. Policy decision makers need tools to help identify and manage the many business considerations involved in developing Circles of Trust, the legal and contractual frameworks governing federation between organizations. Liberty's Business and Policy Deployment Guidelines, developed by the Alliance's Public Policy Expert Group (PPEG), is the first of many tools and documents to come from Liberty to provide assistance with this decision framework.

Liberty Alliance is the only global organization addressing the business, policy and technology aspects of identity management and the only identity-focused organization that has a Public Policy Expert Group, which provides advice and guidance on privacy functionality within Liberty specifications. PPEG member representatives from BIPAC (http://www.bipac.org), the US General Services Administration (http://www.gsa.gov), Oracle (http://www.oracle.com) and Sun Microsystems (www.sun.com) spearheaded the development of the deployment guidelines by leveraging their work in open federated identity management.

"Policy decision makers around the world continuously point to business, legal and policy concerns as the biggest barriers to implementing industry 'circles of trust' or federations," said Dan Blum, Senior VP and Research Director at Burton Group. "Resources designed to address these issues will be welcomed by organizations looking to deploy federated identity solutions."

Organizations developing Circles of Trust need to address, among other things, what type of information will be shared among companies, how and when it will be shared, what security procedures will be used to maintain the confidentiality of such information and how participants may join or leave the Circle of Trust. Liberty's Business and Policy Deployment Guidelines will help policy decision managers better manage these issues in order to develop Circles of Trust faster and more successfully.

"Companies have a lot to consider as they move to establish Circles of Trust," said Michael Aisenberg, chair of Liberty's PPEG and director of government relations, VeriSign, Inc. "We've created these guidelines to jump-start the business conversations policy decision managers need to have when creating Circles of Trust and to help organizations learn from our experience in developing open federated identity solutions."

The release of the Business and Policy Guidelines is an example of how Liberty works to deliver real world solutions that solve real world identity problems. Liberty members work collaboratively to create identity specifications, guidelines and best practices based on well-defined business requirements -- always involving end users in the process. This is the model Liberty has based its work on since the organization was formed in 2001. Liberty's Business and Policy Deployment Guidelines will be available on October 11, 2005. Please visit http://www.projectliberty.org/resources/whitepapers/deployment_guidelines_v2_9.pdf to view and download the document.

About the Business and Policy Deployment Guidelines Webcast

The Webcast, "Navigating the Business and Policy Questions of Federation: Liberty Alliance Deployment Guidelines," will be held on October 12, 2005, from 8:00-9:00am PDT. The event is open to all individuals interested in learning more about Liberty's Business and Policy Deployment Guidelines. Presenters will include members of Liberty's Public Policy Expert Group and member organizations who have worked on developing the Business and Policy Guidelines. Participants can register for this Webcast at

https://www.projectliberty.org/scripts/Oct_teleconf.asp.

About the Liberty Alliance Project

The Liberty Alliance Project (www.projectliberty.org) is a global alliance of companies, non-profit and government organizations committed to developing open standards for federated network identity that support all current and emerging network devices. Federated identity offers businesses, governments, employees and consumers a more convenient and secure way to control identity information in today's digital economy, and is a key component in driving the use of e-commerce, personalized data services, as well as web-based services. Membership is open to all commercial and non-commercial organizations.

If you are interested in seeing the full list of Liberty Alliance members or are interested in becoming a member, visit www.projectliberty.org.

Contact

Russell DeVeau
Liberty Alliance Communications
Tel: +1 718-263-1762 - New York
Tel: 908-251-1549 - Mobile
Email: russ@projectliberty.org
AOL IM: devcommruss

[Source: http://www.projectliberty.org/press/details.php?item_id=141; Guidelines, cache]

Prepared by Robin Cover for The XML Cover Pages archive. General references in "Liberty Alliance Specifications for Federated Network Identification and Authorization."

SEARCH Advanced Search ABOUT Site Map CP RSS Channel Contact Us Sponsoring CP About Our Sponsors NEWS Cover Stories Articles & Papers Press Releases CORE STANDARDS XML SGML Schemas XSL/XSLT/XPath XLink XML Query CSS SVG TECHNOLOGY REPORTS XML Applications General Apps Government Apps Academic Apps EVENTS LIBRARY Introductions FAQs Bibliography Technology and Society Semantics Tech Topics Software Related Standards Historic	Privacy and Security Policy Deployment Guidelines Liberty Alliance Releases Business and Policy Guidelines for Deploying Federated Identity Management Liberty's First Guidelines for Policy Decision Makers Addressing the Business, Legal, and Privacy Aspects of Federation Liberty Alliance Project. October 11, 2005. The Liberty Alliance Project, a global consortium for open federated identity standards and identity-based Web services, today announced the release of business and policy guidelines for helping organizations address and manage the business, legal and privacy challenges of deploying federated identity management. The guidelines have been developed based on the experiences of Liberty members who have implemented federation and serve as a resource for accelerating the wide-scale deployment of federated identity solutions. Liberty will hold a Webcast to discuss the guidelines on Wednesday, October 12th [2005] at 8:00AM US Pacific Time. With over one billion Liberty-enabled identities and devices expected globally by the end of 2006, Liberty has proven that the technology for deploying successful federation is in place. But Liberty also recognizes that in order to fully leverage the benefits of federation, technology alone is not enough. Policy decision makers need tools to help identify and manage the many business considerations involved in developing Circles of Trust, the legal and contractual frameworks governing federation between organizations. Liberty's Business and Policy Deployment Guidelines, developed by the Alliance's Public Policy Expert Group (PPEG), is the first of many tools and documents to come from Liberty to provide assistance with this decision framework. Liberty Alliance is the only global organization addressing the business, policy and technology aspects of identity management and the only identity-focused organization that has a Public Policy Expert Group, which provides advice and guidance on privacy functionality within Liberty specifications. PPEG member representatives from BIPAC (http://www.bipac.org), the US General Services Administration (http://www.gsa.gov), Oracle (http://www.oracle.com) and Sun Microsystems (www.sun.com) spearheaded the development of the deployment guidelines by leveraging their work in open federated identity management. "Policy decision makers around the world continuously point to business, legal and policy concerns as the biggest barriers to implementing industry 'circles of trust' or federations," said Dan Blum, Senior VP and Research Director at Burton Group. "Resources designed to address these issues will be welcomed by organizations looking to deploy federated identity solutions." Organizations developing Circles of Trust need to address, among other things, what type of information will be shared among companies, how and when it will be shared, what security procedures will be used to maintain the confidentiality of such information and how participants may join or leave the Circle of Trust. Liberty's Business and Policy Deployment Guidelines will help policy decision managers better manage these issues in order to develop Circles of Trust faster and more successfully. "Companies have a lot to consider as they move to establish Circles of Trust," said Michael Aisenberg, chair of Liberty's PPEG and director of government relations, VeriSign, Inc. "We've created these guidelines to jump-start the business conversations policy decision managers need to have when creating Circles of Trust and to help organizations learn from our experience in developing open federated identity solutions." The release of the Business and Policy Guidelines is an example of how Liberty works to deliver real world solutions that solve real world identity problems. Liberty members work collaboratively to create identity specifications, guidelines and best practices based on well-defined business requirements -- always involving end users in the process. This is the model Liberty has based its work on since the organization was formed in 2001. Liberty's Business and Policy Deployment Guidelines will be available on October 11, 2005. Please visit http://www.projectliberty.org/resources/whitepapers/deployment_guidelines_v2_9.pdf to view and download the document. About the Business and Policy Deployment Guidelines Webcast The Webcast, "Navigating the Business and Policy Questions of Federation: Liberty Alliance Deployment Guidelines," will be held on October 12, 2005, from 8:00-9:00am PDT. The event is open to all individuals interested in learning more about Liberty's Business and Policy Deployment Guidelines. Presenters will include members of Liberty's Public Policy Expert Group and member organizations who have worked on developing the Business and Policy Guidelines. Participants can register for this Webcast at https://www.projectliberty.org/scripts/Oct_teleconf.asp. About the Liberty Alliance Project The Liberty Alliance Project (www.projectliberty.org) is a global alliance of companies, non-profit and government organizations committed to developing open standards for federated network identity that support all current and emerging network devices. Federated identity offers businesses, governments, employees and consumers a more convenient and secure way to control identity information in today's digital economy, and is a key component in driving the use of e-commerce, personalized data services, as well as web-based services. Membership is open to all commercial and non-commercial organizations. If you are interested in seeing the full list of Liberty Alliance members or are interested in becoming a member, visit www.projectliberty.org. Contact Russell DeVeau Liberty Alliance Communications Tel: +1 718-263-1762 - New York Tel: 908-251-1549 - Mobile Email: russ@projectliberty.org AOL IM: devcommruss [Source: http://www.projectliberty.org/press/details.php?item_id=141; Guidelines, cache] Prepared by Robin Cover for The XML Cover Pages archive. General references in "Liberty Alliance Specifications for Federated Network Identification and Authorization."