“Winner Take All” Three Party Model A special case of the three party model where the service provider wants to allow the requester to use an existing identity, but only accepts authentication from a defined set of providers. Participants sign an agreement with the identity provider, which also allows them to talk to one another. […]

Federations A Federation provides a standard, pre-negotiated set of contracts that allow organizations to recognize identities issued by one another.  A federation agreement might specify user roles, governance, security and verification policies, or specific technical methods. The federation is organized around a Contract Hub, which is responsible for the agreements. Organizations with similar goals or […]

A special case of the three party model where the service provider specifies the technical methods that it will accept, but allows the requester to choose any identity service they like.  The service provider does not set details for identity verification or authentication and simply assumes that the requester has chosen one that’s good enough […]

Three Party Model A trusted third party provides identities to both the requester and service provider. In order to interact with one another, both must agree to trust the same identity provider. Examples: Google, Facebook, American Express, Paypal, Amazon, iTunes App Store   There are two broad types of Three Party Model. If one (or […]