OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

saml-dev message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: [no subject]


However, if the new business partner does not have SAML, then it may
actually cost more money to get them to implement it, plus the
"political capital" involved.

I'm a bit skeptical about not having to cost justify SAML, since that
is literally what the technical folks have been asked to do in this
case.  If there is a compelling argument about why they should not have
to, I'll be glad to hear it.  :)

Hence my original question about usage statistics.  If enough
organizations are currently using SAML, then it seems that that is one
piece of evidence that might help.

I did manage to find one article [1] that indicates that Burton Group
(BTW, thanks again Eve) has estimated that 10% of corporations are using
it.  (Without the Burton report, I am left with the question, "10% of
what set of corporations...")

The more research I do, the more I am coming to believe that this
decision will probably not be based on hard facts.  At this point, I am
mostly hoping to find enough information so that those who will make
this decision will be as well-informed as possible.

Cheers,

Barton

[1] 
http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci957001,00.html

>>> "Hal Lockhart" <hlockhar@bea.com> 6/4/2004 11:30:37 AM >>>
[snip] SAML or Liberty probably provide no quantifiable benefit. (In
other words the benefit of a proprietary or SAML-based solution is the
same.) The only benefit comes from the ease of possible future
interoperability.

[snip]

So if you want to cost justify something, it is not SAML per se. It is
Web SSO or Identity Federation with organization X or Interoperability
with Authorization Provider Y or something of that sort.

Hal
 
===========================================================================





"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]