Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
RE: [higgins-dev] Higgins and Authentication

Mike, 

I will answer you from the identity agent deployment configuration(s). 

Authentication by the user happens in at most two places in Higgins. The
first place is where the user has to provide authentication materials to the
IdP "behind" a card (e.g. an STS or an OpenID OP). In this area the Higgins
project doesn't innovate or define new kinds of authentication, it follows
whatever standards have gotten traction in the marketplace. We've been
testing with both UN/PW and with using a personal card.

In the H1 configuration (though not in H2, and H3) there is a second place
where auth happens. In H1 the Higgins browser extension (HBX) must
authenticate itself to the remote Higgins service. In version 0.8 HBX asks
the user for a master password. In the long run the user should have a
choice of auth approaches/technologies with different strengths and
depending on the interaction the user is engaged in. We probably need HBX
itself to be pluggable/extensible so that new auth approaches could be
snapped in by the user. Since Higgins is open source, we can't bundle
commercial auth tech. But with a pluggable approach the user could choose
from multiple options. 

HTH,

-Paul

> -----Original Message-----
> From: higgins-dev-bounces@xxxxxxxxxxx [mailto:higgins-dev-
> bounces@xxxxxxxxxxx] On Behalf Of Mike Duffy
> Sent: Thursday, June 28, 2007 6:25 PM
> To: higgins-dev@xxxxxxxxxxx
> Subject: [higgins-dev] Higgins and Authentication
> 
> Could someone please provide some guidance on integrating authentication
> technologies into Higgins?
> 
> I went through the Higgins site and the archives for this newsgroup and
> I could find no clear documentation.
> 
> The article about idemix
> (http://arstechnica.com/news.ars/post/20070411-ibms-higgins-project-
> offers-anonymous-internet-logins.html)
> was interesting, but provided no specifics.
> 
> Thx.
> 
> Mike
> _______________________________________________
> higgins-dev mailing list
> higgins-dev@xxxxxxxxxxx
> https://dev.eclipse.org/mailman/listinfo/higgins-dev



Back to the top