Identity for duration allows you to provide identification, authentication and authorization across
organizational and platform boundaries.
You can implement identity for duration, either within a single organization to allow access to diverse
web applications or between organizations that have an established trust relationship to establish an
identity for duration partnership.
Both partners agree to create a federated trust relationship.
An ongoing business relationship is the basis for this federated draft, and it allows the organizations
to implement business processes.
The business relationship identifies.
Please know that federated trusted mode is not the same as a forest trust that organisations can configure
between days forests in a federated trust.
The ADF has servers in two organisations, never have to communicate directly with each other.
In addition, all communication in a federated deployment Agua or H2, it appears.
So you do not need to open multiple boards on any fire walls to allow for duration.
As part of the Federated Trust, each partner defines each of its resources are accessible to the other
organization and how access to their resources is allowed.
For example, to update a sales forecast, a sales representative might need to collect information
from a supplier database that is hosted on the Suppliers Network.
The administrator of the domain for the sales representative is responsible for ensuring that the appropriate
sales representatives are members of the group that requires access to the supplier's database.
The administrator of the organization in which the database is located is the responsible for ensuring
that the partners employees have access only to the data that they are required.
In an identity for duration solution.
The organization in which users are located stores, owns and manages user identities and their associated
credentials as part of the Identity Federation Trust.
Each organization also defines how user identifiers identities are shared in a security enhanced manner
to restrict access to resources.
Each partner defines the services that it makes available to trusted partners and customers, and it
defines which are the organizations and users it trusts.
It.
Each partner also defines both what types of credentials and requests it accepts and its privacy policies
to help ensure that private information is not accessible within the trust.
You can also use identity for duration within a single organization.
For example, an organization might plan to deploy several web based applications that require authentication
by using an A.D. offense.
The organization can implement one authentication solution for all of the applications.
Making sure making it easier to.
For users to.
In multiple internal domains or forests to access the application.
The solution can extend to external partners in the future without requiring developers to change the
application.
Next up, we'll be talking about what our claims based identity and claims based authentication.