TMCnet News
OASIS to Develop CloudAuthZ Standard Profiles for Managing Authorization with Contextual User DataBOSTON --(Business Wire)-- The OASIS international open standards consortium has launched the Cloud Authorization (CloudAuthZ) Technical Committee, a project to develop enhanced models for managing authorizations and entitlements in SaaS (News - Alert), PaaS, and IaaS contexts. The goal of CloudAuthZ is to provide greater control of the way cloud computing resources are used. It will enable contextual information (such as where users are, what they are doing, which device they are using, etc.) to inform authorization decisions. CloudAuthZ will define configurations of existing standards, such as OAuth, SCIM, and XACML, to provide mechanisms for enabling the delivery of cloud contextual attributes to Policy Enforcement Points. This will allow cloud infrastructures to provide--in real time--a subset of contextual entitlements sets that can be used to authorize or deny a Consumer's use of a specific resource. Bank of America's Radu Marian co-chairs the OASIS CloudAuthZ Technical Committee. He explained, "CloudAuthZ will reduce the need for customized interactions between customer and vendor systems and so decrease the overhead of supporting authorization and entitlement. It will also enhance portability across multiple systems." "CloudAuthZ profiles will allow cloud providers to enforce authorization policies in the most optimal way possible," added Anil Saldhana of Red Hat, who also co-chairs the OASIS group. Contributions of relevant use cases for CloudAuthZ are welcome. New members are encouraged to join the Technical Committee at any time. Archives of the work are acessible to both members and non-members, and OASIS invites public review and comment on the work. Support for CloudAuthZ
Red Hat (News - Alert)
SailPoint
ViewDS
Additional information: About OASIS: OASIS (Organization for the Advancement of Structured Information Standards) is a not-for-profit, international consortium that drives the development, convergence and adoption of open standards for the global information society. OASIS promotes industry consensus and produces worldwide standards for cloud computing, security, privacy, content technologies, business transactions, the Smart Grid, emergency management, and other applications. OASIS open standards offer the potential to lower cost, stimulate innovation, grow global markets, and protect the right of free choice of technology. OASIS members broadly represent the marketplace of public and private sector technology leaders, users, and influencers. The consortium has more than 5,000 participants representing over 600 organizations and individual members in 100 countries.
|