OpenID Connect Standard Extends Digital Identities Across the Web -- THE Journal

Cybersecurity

OpenID Connect Standard Extends Digital Identities Across the Web

By Rhea Kelly
02/26/14

The OpenID Foundation has launched a new standard for Internet security and privacy. Organizations can now use OpenID Connect to develop secure, flexible and interoperable identity Internet ecosystems, allowing digital identities to be used across websites and applications via any computing or mobile device.

OpenID Connect enables applications to outsource the business of identity verification to specialist identity service operators, called identity providers, while still managing their relationships with users. The standard has been implemented worldwide by Internet and mobile companies such as Google, Microsoft, Salesforce.com, Ping Identity, Nomura Research Institute, mobile network operators and other companies and organizations. It will be built into commercial products and implemented in open source libraries for global deployment.

"Widely available secure, interoperable digital identity is the key to enabling easy-to-use, high-value cloud-based services for the devices and applications that people use," said Alex Simons, director of program management for Microsoft Active Directory, in a prepared statement. "OpenID Connect fills the need for a simple yet flexible and secure identity protocol and also lets people leverage their existing OAuth 2.0 investments."

Next week at the London headquarters of mobile operators association GSMA, OpenID Foundation members will meet with counterparts at the GSMA to begin work on interoperability across global mobile network operators. The OpenID Foundation, the Open Identity Exchange and the GSMA are collaborating on pilot and discovery projects and in 2014 will begin testing how OpenID Connect implementations can enhance online choice, efficiency, security and privacy.

Mobile Connections
Building on the OpenID Connect standard, the GSMA association for mobile operators recently launched Mobile Connect, a collaborative effort to develop a new service that will allow consumers to securely access a wide array of digital services using their mobile phone account for authentication.

"The GSMA's role is to work with the mobile operators to deliver relevant services to their customers; one such area that is growing in importance is the use of the mobile phone for authentication or identification purposes," said Marie Austenaa, head of personal data for the organization, in a press release. "In order to achieve global scale and ease of implementation both for mobile operators and for the service providers, it is important to have a consistent approach — and this is what OpenID Connect provides."

About the Author

Rhea Kelly is editor in chief for Campus Technology, THE Journal, and Spaces4Learning. She can be reached at [email protected].

E-Mail this page

Printable Format

Featured

Survey: Top Teacher Uses of AI in the Classroom

A new report from Cambium Learning Group outlines the top ways educators are using artificial intelligence to manage their classrooms and support student learning.
Juniper Intros AI-Native Networking and Security Management Platform

Juniper Networks has launched a new solution that integrates security and networking management under a unified cloud and artificial intelligence engine.
Human Factor Moves to Top Cloud Threat in Cloud Security Alliance Report

The No. 1 cybersecurity threat in the cloud has changed from a couple years ago, according to a new report from the Cloud Security Alliance (CSA), which provided handy mitigation strategies and suggested AI can help (or hurt).
Windows Server 2025 Now Generally Available

Microsoft has announced the general availability of Windows Server 2025. The release will enable organizations to deploy applications on-premises, in hybrid setups, or fully in the cloud, the company said.