A Dynamic Federated Identity Management Using OpenID Connect
Identity federation allows one to link a user’s digital identities across several identity management systems. Federated identity management (FIM) ensures that users have easy access to the available resources. However, scaling FIM to numerous partners is a challenging process due to the interoperab...
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2022-11-01
|
| Series: | Future Internet |
| Subjects: | |
| Online Access: | https://www.mdpi.com/1999-5903/14/11/339 |
| _version_ | 1797465226176626688 |
|---|---|
| author | Ahmad Alsadeh Nasri Yatim Yousef Hassouneh |
| author_facet | Ahmad Alsadeh Nasri Yatim Yousef Hassouneh |
| author_sort | Ahmad Alsadeh |
| collection | DOAJ |
| description | Identity federation allows one to link a user’s digital identities across several identity management systems. Federated identity management (FIM) ensures that users have easy access to the available resources. However, scaling FIM to numerous partners is a challenging process due to the interoperability issue between different federation architectures. This study proposes a dynamic identity federation model to eliminate the manual configuration steps needed to establish an organizational identity federation by utilizing the OpenID Connect (OIDC) framework. The proposed model consists of three major steps to establish dynamic FIM: first, the discovery of the OpenID service provider, which indicates the location of the partner organization; second, the registration of the OpenID relying party, which allows the organization and its partner to negotiate information for establishing the federation; finally, establishing the dynamic trust federation. The proposed dynamic FIM model allows applications to provide services to end-users coming from various domains while maintaining a trust between clients and service providers. Through our proposed dynamic identity federation model, organizations can save hundreds of hours by achieving dynamic federation in runtime and serving a large number of end-users. |
| first_indexed | 2024-03-09T18:19:31Z |
| format | Article |
| id | doaj.art-479ed832338e431c8e935566b5e0be14 |
| institution | Directory Open Access Journal |
| issn | 1999-5903 |
| language | English |
| last_indexed | 2024-03-09T18:19:31Z |
| publishDate | 2022-11-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Future Internet |
| spelling | doaj.art-479ed832338e431c8e935566b5e0be142023-11-24T08:25:28ZengMDPI AGFuture Internet1999-59032022-11-01141133910.3390/fi14110339A Dynamic Federated Identity Management Using OpenID ConnectAhmad Alsadeh0Nasri Yatim1Yousef Hassouneh2Electrical and Computer Engineering Department, Birzeit University, Birzeit P.O. Box 14, PalestineComputer Science Department, Birzeit University, Birzeit P.O. Box 14, PalestineComputer Science Department, Birzeit University, Birzeit P.O. Box 14, PalestineIdentity federation allows one to link a user’s digital identities across several identity management systems. Federated identity management (FIM) ensures that users have easy access to the available resources. However, scaling FIM to numerous partners is a challenging process due to the interoperability issue between different federation architectures. This study proposes a dynamic identity federation model to eliminate the manual configuration steps needed to establish an organizational identity federation by utilizing the OpenID Connect (OIDC) framework. The proposed model consists of three major steps to establish dynamic FIM: first, the discovery of the OpenID service provider, which indicates the location of the partner organization; second, the registration of the OpenID relying party, which allows the organization and its partner to negotiate information for establishing the federation; finally, establishing the dynamic trust federation. The proposed dynamic FIM model allows applications to provide services to end-users coming from various domains while maintaining a trust between clients and service providers. Through our proposed dynamic identity federation model, organizations can save hundreds of hours by achieving dynamic federation in runtime and serving a large number of end-users.https://www.mdpi.com/1999-5903/14/11/339identity managementidentity federationOpenID connectdynamic client registration |
| spellingShingle | Ahmad Alsadeh Nasri Yatim Yousef Hassouneh A Dynamic Federated Identity Management Using OpenID Connect Future Internet identity management identity federation OpenID connect dynamic client registration |
| title | A Dynamic Federated Identity Management Using OpenID Connect |
| title_full | A Dynamic Federated Identity Management Using OpenID Connect |
| title_fullStr | A Dynamic Federated Identity Management Using OpenID Connect |
| title_full_unstemmed | A Dynamic Federated Identity Management Using OpenID Connect |
| title_short | A Dynamic Federated Identity Management Using OpenID Connect |
| title_sort | dynamic federated identity management using openid connect |
| topic | identity management identity federation OpenID connect dynamic client registration |
| url | https://www.mdpi.com/1999-5903/14/11/339 |
| work_keys_str_mv | AT ahmadalsadeh adynamicfederatedidentitymanagementusingopenidconnect AT nasriyatim adynamicfederatedidentitymanagementusingopenidconnect AT yousefhassouneh adynamicfederatedidentitymanagementusingopenidconnect AT ahmadalsadeh dynamicfederatedidentitymanagementusingopenidconnect AT nasriyatim dynamicfederatedidentitymanagementusingopenidconnect AT yousefhassouneh dynamicfederatedidentitymanagementusingopenidconnect |