[security-services] XML & Web Services magazine article on SAML

I just saw this in the XML.org daily news.  I don't think it's been sent 
to this list yet.  (Looks like it was written a month or two ago.)

------------------------------------------------------

SAML Advances Single Sign-On Prospects
XML & Web Services Magazine

Promising a standard means of authentication and authorization, SAML
passes an important OASIS milestone.  OASIS has completed the heavy
lifting on its latest XML standard, the Security Assertion Markup
Language (SAML), a standard for exchanging authentication and
authorization information between domains. SAML (pronounced "sam-el")
is designed to offer single sign-on for both automatic and manual
interactions between systems. It will let users log into another
domain and define all of their permissions, or it will manage
automated B2B exchanges between two parties.  SAML addressed the need
to have an industry standard way of representing assertions of
authentication and authorization for users and interactions,
according to Jeff Hodges, co-chair of the Security Services Technical
Committee (SSTC) at OASIS that developed the spec and principal
engineer at Oblix.
http://www.fawcette.com/xmlmag/2002_03/magazine/departments/marketscan/SAML/


-- 
Eve Maler                                    +1 781 442 3190
Sun Microsystems XML Technology Center   eve.maler @ sun.com