Security/identity

Lately I’ve been discussing three human tendencies we should take into account in designing identity-enabled systems:...

Check it out — OASIS has added a SAML entry to its growing list of XML.org...

The organizers of the conference on Managing Identity in New Zealand have made available videos of...

Joe Andrieu describes his “ah-hah” experience about r-cards (“relationship cards”) at the recent Internet Identity Workshop...

How not to handle forgotten password recovery flow during a massive promotion. A big fat reminder...

The requirements I’ve been talking about lately in this space aren’t impossible to satisfy. What solutions...

Previously, I argued that people are not going to sit still for the heavyweight login-and-consent processes...

In my recent talk on everyday identity, I suggested that login-time consent to data sharing is...