« The 5th Annual Year in Ideas | Main | IBM looks to make middleware SMILE »

Microsoft says it won't support SAML 2.0

While I was at SC05, I missed reading a lot of trade press, and while I'm sure that I will never "catch up", going through a few of my most frequently traveled RSS newsfeeds found this.

The bickering between MSFT and the anti-MSFT factions within the WS-* standards is getting very tiresome.  The result in WS-Man / WS-RF battle seems to be a pair of competing standards that provide almost exactly the same functionality.  Now this regarding SAML and WS-Federation.  Sigh.

Link: Microsoft says it won't support SAML 2.0 - Computerworld.

... Microsoft has backed WS-Federation protocols for the next generation of message-based applications because it offers a full suite of security, message and transaction protocols, said Don Schmidt, senior program manager for Microsoft's Identity and Access group. The company's stance is not about which protocol set is necessarily better but rather which offers wider flexibility in accommodating federated identity, he said.

Schmidt conducted a session today on ADFS (Active Directory Federation Services), Microsoft's software for federated identity, at the company's IT Forum 2005 in Barcelona.

The WS-Federation protocols compete with the SAML (Security Assertion Markup Language) 2.0 specification, which so far has strong footing in the race to create secured identity federation across organizations. SAML 2.0 is backed by consortiums such as the Liberty Alliance and the Organization for the Advancement of Structured Information Standards (OASIS).

SAML 2.0 protocols are fine for strictly Web single sign-on, Schmidt said. But the WS-Federation protocols are better equipped to deal with a distributed Web-services environment for message reliability, transaction support and security, he said. SAML 2.0 does not have reliable messaging or transaction support, he said. ...

References (1)

References allow you to track sources for this article, as well as articles that were written in response to this article.

Reader Comments (1)

Don't worry the open source community will support SAML 2.0 on an MS platform...

Dec 19, 2005 at 7:20PM | Unregistered CommenterJames

PostPost a New Comment

Enter your information below to add a new comment.

My response is on my own website »
Author Email (optional):
Author URL (optional):
All HTML will be escaped. Hyperlinks will be created for URLs automatically.