From the course: Cloud Data, Platform, and Applications Security by Pearson

Unlock this course with a free trial

Join today to access over 25,200 courses taught by industry experts.

Federated identity

Federated identity

In the previous lesson, we looked at a managed IAM, Identity and Access Management service that's provided by the CSP. In our example, it was Amazon Web Services. Now, they and other CSPs actually prefer that you do federated identity, having your own identity provider. Now, Federated Identity is a method for connecting a subject's identity across numerous distinct identity or directory management systems. It lets users quickly move between systems and service providers while still retaining a level of security. Early popular organizational scenarios were used to join user identities between, let's say, Novell and Microsoft systems, or between multiple domains in a Windows forest. Federated Identity provides single sign-on for one or more organizations, including additional services or service providers. It can be deployed as a web of trust model, where each member of the federation approves or trusts the other members. And typically, there is some initial token exchange between those…

Contents