The Liberty Alliance Project today unveiled business and policy guidelines designed to help organizations cope with the business,legal and privacy challenges of deploying federated identity management.
According to the consortium, the guidelines are based on the real world experiences of its members who have successfully implementedfederated identity systems.
Liberty's Business and Policy Deployment Guidelines, developed by the Alliance's Public Policy Expert Group (PPEG), will be "thefirst of many" tools and documents to come from the Liberty to provide assistance with this decision framework, the organisationpromised.
PPEG member representatives from BIPAC, the US General Services Administration, Oracle and Sun Microsystems spearheaded the development of the deployment guidelines.
Liberty pointed out that policy decision makers need tools to help identify and manage the many business considerations involved indeveloping such circles of trust, the legal and contractual frameworks governing federation between organisations.
"Policy decision makers around the world continuously point to business, legal and policy concerns as the biggest barriers toimplementing industry 'circles of trust' or federations," said Dan Blum, Senior vice president and research director at BurtonGroup.
Liberty advised that organizations developing circles of trust need to address, among other things, what type of information will beshared among companies, how and when it will be shared, what security procedures will be used to maintain the confidentiality ofsuch information and how participants may join or leave the circle of trust.
The consortium said its guidelines aim to help policy decision managers better manage these issues in order to develop circles oftrust more quickly and successfully.
"Companies have a lot to consider as they move to establish circles of trust," said Michael Aisenberg, chair of Liberty's PPEG anddirector of government relations, VeriSign.
"We've created these guidelines to jump-start the business conversations policy decision managers need to have when creating Circles of Trust and to help organizations learn from our experience in developing open federated identity solutions."
