OpenID Enhanced Authentication Profile (EAP) Working Group

Slides:



Advertisements
Similar presentations
1Copyright © 2010, Printer Working Group. All rights reserved. PWG Plenary Status Report IDS Working Group August 4, 2010 Bagsværd, Denmark- PWG F2F Meeting.
Advertisements

Smartphone-based authorization system Advisor: Dr. Wenjun Zeng - Professor Presenter: Yilihamujiang, Ailiyasijiang Zhou, Guanlong Al-Sinani, H. S. (2011).
1Copyright © 2008, Printer Working Group. All rights reserved. PWG Imaging Device Security (IDS) Working Group Lexington, KY – P2600 Meeting October 24,
1 Trillion Azure AD authentications since the release of the service 50 M Office 365 users active every month >1 Billion authentications every.
OpenID Connect Update and Discussion Mountain View Summit – September 12, 2011 Mike Jones – Microsoft John Bradley – Independent Nat Sakimura – Nomura.
Finalize RESTful Application Programming Interface (API) Security Recommendations Transport & Security Standards Workgroup January 28, 2014.
OpenID Connect Working Group April 6, 2015 Mike Jones Identity Standards Architect – Microsoft.
OAuth/UMA for ACE 24 th March 2015 draft-maler-ace-oauth-uma-00.txt Eve Maler, Erik Wahlström, Samuel Erdtman, Hannes Tschofenig.
Health IT RESTful Application Programming Interface (API) Security Considerations Transport & Security Standards Workgroup March 18, 2015.
Prabath Siriwardena Senior Software Architect. An open source Identity & Entitlement management server.
Workgroup Discussion on RESTful Application Programming Interface (API) Security Transport & Security Standards Workgroup January 12, 2014.
Identity Management Hannes Tschofenig. Motivation OAuth was created to allow secure and privacy friendly sharing of data. OAuth is not an authentication.
IETF #91 OAuth Meeting Derek Atkins Hannes Tschofenig.
PAWS: Security Considerations Yizhuang WU, Yang CUI PAWS WG
Hannes Tschofenig, Blaine Cook. 6/4/2016 IETF #77, SAAG 2 The Problem.
Observations from the OAuth Feature Survey Mike Jones March 14, 2013 IETF 86.
Status Update on Other GFIPM Activity Threads GFIPM Delivery Team Meeting November 2011.
Web Authorization Protocol (oauth) IETF 90, Toronto Chairs: Hannes Tschofenig, Derek Atkins Responsible AD: Kathleen Moriarty Mailing List:
Web Authorization Protocol (oauth) Hannes Tschofenig.
Justin Richer The MITRE Corporation October 8, 2014 Overview of OAuth 2.0 and Blue Button + REST.
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential.
OAuth WG Blaine Cook, Hannes Tschofenig. Note Well Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet-Draft.
Secure Mobile Development with NetIQ Access Manager
OpenID Connect Working Group May 10, 2016 Mike Jones Identity Standards Architect – Microsoft.
OpenID Certification June 7, 2016 Michael B. Jones Identity Standards Architect – Microsoft.
SIP Working Group IETF Chairs -- Rohan MAHY Dean WILLIS.
OpenID Connect: An Overview Pat Patterson Developer Evangelist Architect
Web Authorization Protocol WG Hannes Tschofenig, Derek Atkins.
Identity Standards Architect, Microsoft
Access Policy - Federation March 23, 2016
Dr. Michael B. Jones Identity Standards Architect at Microsoft
4/18/2018 1:15 PM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN.
Shibboleth Roadmap
OAuth WG Conference Call, 11th Jan. 2013
Phil Hunt, Hannes Tschofenig
Improving Security of Real-time Communications
Chairs: Derek Atkins and Hannes Tschofenig
OAuth Assertion Documents
IETF-70 EAP Method Update (EMU)
Agenda OAuth WG IETF 87 July, 2013.
Addressing the Beast: Single Sign-On II
OpenID Connect Working Group
OpenID Enhanced Authentication Profile (EAP) Working Group
IETF101 London Web Authorization Protocol (OAuth)
OpenID Connect: News, Overview, Certification, and Action Items
Identity Standards Architect – Microsoft
OpenID Connect Working Group
IETF103 Bangkok Web Authorization Protocol (OAuth)
draft-ipdvb-sec-01.txt ULE Security Requirements
OpenID Connect Working Group
PWG Plenary Status Imaging Device Security (IDS) Working Group
Web Authorization Protocol (oauth)
SharePoint Online Authentication Patterns
STIR WG IETF-102 PASSPorT Extension for Resource-Priority Authorization (draft-ietf-stir-rph-06) July 18, 2018 Ray P. Singh, Martin Dolly, Subir Das, and.
Token-based Authentication
Microsoft Ignite NZ October 2016 SKYCITY, Auckland.
Web Authorization Protocol (oauth)
IEEE MEDIA INDEPENDENT HANDOVER DCN:
OpenID Connect Working Group
Identity Standards Architect – Microsoft
OpenID Enhanced Authentication Profile (EAP) Working Group
OpenID Connect Working Group
OpenID Enhanced Authentication Profile (EAP) Working Group
IPP Workgroup Session, Day 1
IETF102 Montreal Web Authorization Protocol (OAuth)
Authentication and Authorization for Constrained Environments (ACE)
Web Authorization Protocol (OAuth)
OpenID Connect Working Group
OpenID Enhanced Authentication Profile (EAP) Working Group
HIP – FAS flows addendum to the OIDC integration guide for eBox HIPs.
Presentation transcript:

OpenID Enhanced Authentication Profile (EAP) Working Group May 15, 2018 Dr. Michael B. Jones Identity Standards Architect – Microsoft

What is the EAP WG? Working group description at http://openid.net/wg/eap/ Chartered to: “Develop a security and privacy profile of the OpenID Connect specifications that enable users to authenticate to OpenID Providers using strong authentication specifications. The resulting profile will enable use of IETF Token Binding specifications with OpenID Connect and integration with FIDO relying parties and/or other strong authentication technologies.”

Two EAP Specifications Token Bound Authentication Defines how to apply Token Binding to OpenID Connect ID Tokens http://openid.net/specs/openid-connect-token-bound-authentication-1_0.html EAP ACR Values Defines “acr” values strong authentication profiles http://openid.net/specs/openid-connect-eap-acr-values-1_0.html

Token Binding Update IETF Token Binding specs went to IESG telechat May 10, 2018 IESG review the last step before going to the RFC Editor OAuth Token Binding spec https://tools.ietf.org/html/draft-ietf-oauth-token-binding Defines Token Binding of OAuth 2.0 access tokens, refresh tokens, authorization codes, JWT authorization grants, and JWT client authentication OpenID Connect Token Binding spec http://openid.net/specs/openid-connect-token-bound-authentication-1_0.html Defines Binding of OpenID Connect ID Tokens Continuing to define metadata about Token Binding implementations Implementation available for interop testing Created by Brian Campbell See https://www.ietf.org/mail-archive/web/unbearable/current/msg01332.html

Two ACR Values Defined “phr” – Phishing-Resistant An authentication mechanism where a party potentially under the control of the Relying Party cannot gain sufficient information to be able to successfully authenticate to the End User's OpenID Provider as if that party were the End User “phrh” – Phishing-Resistant Hardware Protected An authentication mechanism meeting the requirements for phishing-resistant authentication above in which additionally information needed to be able to successfully authenticate to the End User's OpenID Provider as if that party were the End User is held in a hardware-protected device or component Phishing-Resistant definition based on 2008 OpenID Provider Authentication Policy Extension (PAPE) specification

Status Working group active Chairs Brian Campbell and Mike Jones Calls scheduled every two weeks on Thursdays For more information, see the working group page http://openid.net/wg/eap/