Gap Analysis Use Case 1: Application and Virtualization Security in the Cloud

["Gershon Janssen" <gershon@qroot.com>]

---

This discussion thread is to start an on-list discussion on the Gap Analysis
of individual use cases. Use case numbers refer to the use cases as
described in the 'OASIS Identity in the Cloud TC Use Cases' Version 1.0,
Working Draft 02, 15 December 2011, which is available at
http://www.oasis-open.org/committees/document.php?document_id=44915&wg_abbre
v=id-cloud

The information below describes the current state. You are invited to
respond on-list to this thread with any comments, insights, additions, etc.
All input will be gathered from the list and consolidated into the next
revision of the Gap Analysis document.

---

Use Case 1: Application and Virtualization Security in the Cloud

Short description:
Feature the importance of managing identities that exist in cloud at all
levels, including the host operating system, virtual machines as well as
applications. Ownership and management of identities may vary at each level
and also be external to the cloud provider.

Relevant applicable standards:
-	SAML
-	WS-Trust
-	OpenID
-	oAuth
-	OVF 
-	X.500
-	LDAP
-	IPsec
-	RADIUS
-	SPML
-	SCIM

Analysis notes:

Possible GAPs identified:

---