2013-04-02
Consensual impersonation is delegation done very wrong
I’ve got a new post up on the Forrester blogs about “consensual impersonation”, which is what...
OAuth
2012-03-12
New post: Venn of access control for the API economy
Up on the Forrester blogs, I present a new Venn diagram that compares OAuth, OpenID Connect,...
2011-07-15
New: Report contemplating OAuth and “Zero Trust identity”
Is it possible for an enterprise to turn itself inside-out? Apparently so. I’ve got a new...
2011-06-10
New: “Participating In Markets For Portable Identities In The Cloud: What’s The Coin Of Your Realm?”
I’ve got a new post up on the Forrester blogs, discussing a “markets for portable identity”...
2011-05-10
New: “Protecting Internal APIs – Is OAuth Ready For Its Closeup?”
Check out my new post on the Forrester blog, looking to hear about your experience and...
2011-05-01
How UMA deals with scopes and authorization
The UMA group has been quite busy of late. Like several other efforts (don’t miss John...
2011-02-24
New: “CardSpace Is Dead. Long Live Back-Channel Access.”
I’ve got a new post up on my Forrester blog, commenting on CardSpace and the important...
2011-02-03
New: “OpenID, Successful Failures And New Federated Identity Options”
Though there’s still a creepy fuzzy anonymous head where my picture is supposed to be, I’ve...
2010-12-25
Wishing you a happy, healthy, user-managed new year
Thanks to Domenico Catalano (@DomCat) for putting together this lovely and geeky holiday message! And thanks...
2010-09-10
Making identity portable in the cloud
Yesterday I had the opportunity to contribute to BrightTALK’s day-long Cloud Security Summit with a webcast...