• OpenID Connect… Call me crazy!


    10 Reasons Why OpenID Connect will be ubiquitous for domain authentication “The difficult… I’ll do right now. The impossible may take a little while…” Bob Russell lyrics for Jazz standard “Crazy She Calls Me” OpenID Connect has reached the quorum of votes needed for approval! Check out the launch press release. This under-appreciated event will … Read more >>

    Email
  • Juju OAuth2 Application Security Design Proposal


    We don’t need SSO, we need trust elevation There is no point in designing a solution that provides just SSO. Today, people are using an array of devices (think IOT). Applications need to understand how (and how long ago) a person has been authenticated, and based on the context of the situation, whether they need … Read more >>

    Email
  • Gluu Web Authentication / SSO Protocol Adoption Predictions


    Its hard to make accurate predictions about adoption for SSO protocols. Its impossible to make a detailed model when the known inputs are so vast. With that inherent disclaimer about the difficulty of forecasting, the following graph represents Gluu’s view about the likely adoption and un-adoption of three very important web authentication standards: SAML, CAS, … Read more >>

    Email
  • NSTIC: “Are we there yet?” … Gluu: “Are you kidding?”


    This was originally a comment on a blog post by Jeremy Grant, Senior Executive Advisor at NSTIC, titled: Interim Identity Ecosystem: “Are we there yet?” Follow this link to read that blog. The guiding principles of NSTIC are great. However, great ideas need equally great execution. As CEO of Gluu, I talk with organizations every … Read more >>

    Email
  • How to Move Away From CA SiteMinder to Open Source Authn / Authz


    In our last blog, we discussed the decline of CA Siteminder. So you have seen the light: open standards and open source IAM. But what if your organization already has websites that use SiteMinder|OAM|TAM|ClearTrust? To liberate your organization, here is Gluu’s secret recipe. Skate to where the puck is going: The Winner is… OAuth2 B2C identity … Read more >>

    Email
  • Gluu’s IDnext 2013 Novay Digital Identity Award Submission


    We will be attending IDNext 2013 in the Netherlands and decided to submit our OX open source software platform for consideration for the 2013 Novay Digital Identity Award. Check out a full list of the events we’ll be attending. Below is a Q&A-style transcript of our submission. What do you think… does OX deserve consideration? … Read more >>

    Email
  • Gluu vs. Ping Identity – a (mostly) unbiased comparison


    We know that the strength of open standards is that customers will be able to choose from many commercial and open source solutions. We believe more gas stations on the corner means more business for everyone. We “enjoy” competing with Ping, if that’s possible. Ping provides greatly needed support for open standards, and has literally … Read more >>

    Email