http://www.projectliberty.org Whenever an event is posted to the Liberty Alliance website, it will be pushed into this feed. http://www.projectliberty.org/news_events/events/7th_annual_smart_cards_in_government_conference_smart_card_alliance Topic: Liberty Alliance Identity Assurance Framework (IAF) for Federal Systems Panel: Commercial Technology Applications in the Federal Market · Microsoft OS developments – Ryan Hurst – Microsoft · Securing mobile devices – RIM/CAC · Liberty Alliance Identity Assurance Framework (IAF) for Federal Systems – Peter Alterman – Liberty Alliance · Sun Microsystems For Government PIV Usage – Ed Clay – SUN http://www.projectliberty.org/news_events/events/liberty_alliance_identity_assurance_pre_conference_workshop_at_didw Increasing regulatory pressures across the globe—recognized cost and time savings associated with federation—demand for privacy and less use of personally identifiable information (PII)—increased business potential from federated identity solutions: these are but a few of the marketplace drivers causing organizations to evaluate their identity management strategies. The opportunity—and the returns—are well-recognized and documented by early deployers who recognize federation as a brilliant technical key that unlocks a myriad of business opportunities. But more business opportunities lay beyond the wall of the enterprise—with true value unlocked and realized when single federations federate with others, transactions occur across corporate/organizational boundaries, and organizations realize the same benefits from a policy basis as federated standards have delivered on the technical front. But how do we get from the dream to the reality? http://www.projectliberty.org/news_events/events/webcast_real_world_identity_assurance_wells_fargo_demonstration_of_identity_assurance_principles_in_action Presenter: Jim Gross, Wells Fargo http://www.projectliberty.org/news_events/events/liberty_alliance_webcast_title_the_journey_from_concept_to_reality_identity_assurance_in_action http://www.projectliberty.org/news_events/events/liberty_alliance_workshop_secure_standard_web_services Learn more about Liberty Alliance's Web Services from local partners and vendors. 10:00-10:05 Introductions and welcome (Lasse Andresen) 10:05-10:20 SOA and Security - the high level drivers (Jonathan Scudder) 10:20-11:00 SAML2 refresher - a reminder of what SAML2 is and does (Victor Ake) 11:00-11:10 Break 11:10-12:00 Identity Management Model and User Centric Approach (Fulup Ar Foll) 12:00-12:45 Lunch 12:45-13:45 Introduction to the Liberty Alliance web service framework ID-WSF (Jonathan Scudder) 13:45-14:00 Break 14:00-15:00 Protecting web services in practice - coding against the ZXID API (Sampo Kellomäki) http://www.projectliberty.org/news_events/events/iiw_may_2008 Paul Madsen, NTT presentation on Inflation & Social Duplication http://www.projectliberty.org/news_events/events/panel_discussion_identity_assurance_establishing_common_levels_of_trust_at_gartner_s_identity_access_management_summit Federations inside the enterprise have been advancing globally, but growth outside the enterprise has struggled, requiring better definition of trust, business rules for governing that trust, and some means of certifying or accrediting levels of trust offered by organizations and federations. This panel will include several end deployers sharing individual case studies and experiences, discussing the Identity Assurance Framework, a program under development within the Liberty Alliance to define such a framework, and discuss the levels of assurance and resulting certification and accreditation program that will advance this concept into global commercial acceptance. http://www.projectliberty.org/news_events/events/global_authentication_liberty_alliance_identity_assurance_framework http://www.projectliberty.org/news_events/events/liberty_identity_assurance_framework_roundtable_discussion_at_catalyst_conference_north_america_2008 Learn from our panel about the Liberty Identity Assurance Framework Roundtable discussion at Catalyst Conference North America 2008. http://www.projectliberty.org/news_events/events/liberty_alliance_standards_workshop_at_the_2nd_european_identity_conference_munich_germany http://www.projectliberty.org/news_events/events/webcast_zero_day_threat http://www.projectliberty.org/news_events/events/webcast_identity_governance_framework_new_standards_to_protect_privacy_through_governing_policy http://www.projectliberty.org/news_events/events/webcast_liberty_alliance_privacy_summit_1_of_3_part_series In the past 18 months, the Liberty Public Policy Expert Group (PPEG) has run five Privacy Summit events world-wide, gathering privacy stakeholders from many different disciplines (IT, policy, regulation, legal, academic) for a peer-to-peer discussion of strategic issues and possible solutions. As the series unfolded, the group quickly found that a major stumbling block was the lack of a shared terminology and model for the basic concepts of identity data and privacy. It was too easy for useful discussions of 'second-order' topics such as trust and privacy to get mired in largely unnecessary confusion over basic concepts and terminology. As a result, simple models were created which illustrate the different 'layers' of identity data, their application in different 'sectors' (such as employment, healthcare, tax and so on), and the relative roles of credentials, attributes and indices. The models also illustrate concepts such as identity 'contexts', the establishment of contexts which span sectors, and some of the ways in which architecture, technology and policy need to interact in order for the system as a whole to function correctly. Through the Summits, some key lessons were learned, and we derived simple models which help remove many of the obstacles to a productive, multi-stakeholder discussion of privacy issues. These lessons and models will be explored on this webcast, along with trends to watch for in the future. http://www.projectliberty.org/news_events/events/webcast_understanding_and_leveraging_the_open_source_liberty Understanding and Leveraging the Open Source Liberty Client Library will outline the functionality of the OpenLiberty-J client code and detail the 2008 roadmap for driving the project from beta to general availability. The webcast will provide an overview of OpenLiberty.org, discuss projects in the works and what the community expects to deliver in the future. Participants will understand how to begin building identity consuming applications with OpenLiberty-J today. Presented by Asa Hardcastle, Zenn New Media. http://www.projectliberty.org/news_events/events/driving_trusted_federations_with_standardized_identity_assurance_criteria_at_rsa_conference_2008 This panel presents the ongoing work and roadmaps of global organizations advancing trusted interfederations that span industries and regions. Addressing business and user benefits, technology challenges and regulatory concerns - participants will understand how global cross-industry interfederations are being developed today capable of supporting billions of simultaneous identity transactions. Type: Track Session Intermediate Legal/Compliance Speakers: Roger Sullivan President of Liberty Alliance, and VP Oracle Identity Management, Oracle Corporation Jane Hennessy Senior Vice President, Strategy/Cross-Sell and Marketing, International Personal Banking and WellsSecure, International Group, Wells Fargo Bank, N.A, Alexander Popowycz Vice President Information Security, Fidelity Investments Myisha Frazier-McElveen E-Authentication Solutions, US GSA Søren Peter Nielsen IT Architect, Chief Consultant, Danish National IT and Telecom Agency http://www.projectliberty.org/news_events/events/capitalizing_on_integrated_identity_management_at_2008_fstc_annual_conference Join Brett McDowell, Executive Director of Liberty Alliance for a panel discussion on Identity Management. Chaired by Leigh Williams, BITS. http://www.projectliberty.org/news_events/events/real_world_identity_risk_mitigation_via_collaborative_policies_at_bits_security_forum Join Jim Gross, Senior Vice President, WellsSecure, Wells Fargo for a panel discussion (Panel 6: Collaboration/Public Policies to Mitigate Risk) at the BITS Security Forum. A discussion from 5 panel experts - Jim will highlight the Identity Assurance Expert Group's Trust Framework as a public/private collaboration to minimize risks of repudiation, spoofing and phishing fraud. Moderator: Tom Doughty, Prudential Financial Panelists: Paul Kurtz, Good Harbor Consulting Matthew Moynahan, Veracode Dan Schutzer, FSTC Bob Wilkinson, Citigroup Jim Gross, Wells Fargo http://www.projectliberty.org/news_events/events/towergroup_pre_conference_workshop_on_identity_assurance_credential_and_assurance_programs_for_financial_services_identity_assurance_success The financial services sector is leading the industry in innovative new services and processes that utilize key identity information. What information is used, how it is shared and how it is protected has been the topic of much discussion and regulatory guidance, and organizations have struggled to grow their identity deployments outside of the virtual walls of the institution, impeding the growth that many have predicted would take place. The Identity Assurance Framework—a product of work from the global membership of the Liberty Alliance with heavy financial services and egovernment sector input—builds on existing NIST assurance level standards and collaborative input from other organizations. It aims to break through the barriers of growth, providing guidance for the support of mutual acceptance, validation, and life cycle maintenance across identity federations. Use of assurance levels, which range in confidence level from low to high, is determined by the level of confidence or trust necessary to mitigate risk in the transaction, and mirror the various levels of transactions common in the financial services sector. Through case studies of many leading financial services companies, including Citi, Fidelity, and Wells Fargo, among others, we'll introduce the Identity Assurance Framework and also formally launch our Identity Assurance Accreditation Program for Credential Service Providers (CSPs), introducing some of the program participants. Credential Service Providers are electronic trust service providers that operates one or more credential services, and can include Registration Authorities. This program builds upon Liberty's proven interoperability certification program, establishing and certifying test participants against baseline criteria for general organizational conformity, identity proofing services, credential strength, and credential management services The goal of this program is to initially provide federations and Federation Operators with the means to certify their members for the benefit of inter-federation and streamline the certification process for the industry. Follow-on phases will target the development of criteria for certification of relying parties and federations, themselves. This workshop will provide attendees with a solid understanding of Identity Assurance work underway in the marketplace, tangible guidance on what other institutions are doing, and a blueprint for how to get involved. Some technical knowledge is helpful but not mandatory as the bulk of the presentations will focus on business level case studies and the accreditation process. Business line managers, directors of risk management and security, risk and compliance officers, technoly strategists, product managers, and marketing officers are encouraged to attend. Location: 2008 TowerGroup Financial Services Business & Technology Conference & Exhibition Conference Dates: May 28 - May 30, 2008 Westin Boston Waterfront Hotel Boston, Massachusetts Draft Agenda: 1-1:30 pm Introduction of the Liberty Alliance - Brett McDowell, Executive Director 1:30-1:45 pm Introduction of the Identity Assurance Framework: Defining the Framework and Establishing Goals—Frank Villavicencio, Global Transaction Services, Citi, and Co-Chair of the Identity Assurance Expert Group 1:45-3 pm Case studies on financial sector application of Identity Assurance Framework and Concepts: Citi, Fidelity, and Wells Fargo—goal of these case studies is to provide understanding of how it fits into their business plans/goals, how they are contributing to a single standard solution (ie. marketplace alignment), and foundational guidance on how to get started 3-3:15pm Break 3:15-3:45 pm Introduction of the Accreditation Program and Program Participants--, Alex Popowycz, Fidelity Investments, and Co-Chair of the Identity Assurance Expert Group Presentation includes roll-out/launch the IAF accreditation program and announce initial participants 3:45-4:15 pm TBD 4-4:45 pm Putting the Accreditation Program to Use: Practice and Next Steps—Roundtable Q&A (moderated by Brett McDowell) 4:45-5 pm Wrap Up/Getting Involved—Brett McDowell http://www.projectliberty.org/news_events/events/webcast_identity_assurance_framework_common_organization_service_assessment_criteria This first webcast, the first in a four-part series, will be moderated by Jim Gross, Sr. Vice President, WellsSecure Identity Assurance, Wells Fargo. It is designed to discuss and gather feedback on the Common Organization Service Assessment Criteria section of the Identity Assurance Framework, currently a draft document. This section outlines the criteria for a Credential Service Provider's general business and organizational conformity of its services and its providers as it pertains to the four Levels of Assurance in the IAF. The review session will have a particular focus on elements such as enterprise & service maturity, information security management, operational infrastructure, external services & components, secure communications, etc. http://www.projectliberty.org/news_events/events/webcast_identity_assurance_framework_certification_accreditation_business_rules Moderated by Nathan Faut, Senior Associate, Federal practice, KPMG, this fourth of a four-part webcast series will focus on the Certification/Accreditation Business Rules. This section covers the business rules associated with participation in the Liberty Framework. The review session will focus on roles and responsibilities of CSP's, the role of the Federation Operator and a best practices guideline for relying parties. In addition, this section will discuss the process for accrediting assessors/auditors of CSP's for certification to the Liberty IAF.