Anil saldhana cloud identity

12
Cloud Identity Anil Saldhana RedHat Inc

description

Presentation at the Panel on "Identity" at MIT.

Transcript of Anil saldhana cloud identity

  • 1. Cloud IdentityAnil SaldhanaRedHat Inc
  • 2. About this talk Concept of Identity in Cloud Computing Experiences as Co-chair, Oasis Identity In The Cloud TC.
  • 3. Cloud NIST Definition Computing model enabling convenient, on-demand n/w access to shared pool of configurable compute resources.
  • 4. Cloud NIST Definition Service Models Software as a Service (SaaS) Platform as a Service (Paas) Infrastructure as a Service (IaaS)
  • 5. Cloud NIST Definition Deployment Models Private Cloud Community Cloud Public Cloud Hybrid Cloud
  • 6. General Cloud Identities Issues Administrative Accounts Identities with special attributes Escalated Privileges Dangerous? Controls available?
  • 7. Identity - SaaS Identities local to the SaaS environment Identities from federations Private Trust Federations Community Trust Federations Social Identities as a Service Facebook, Google, Twitter Identities with delegated intermediaries Identity Brokers
  • 8. Identity - PaaS Application Identities Platform Identities
  • 9. Identity - IaaS Application Identities Platform Identities Infrastructure Identities Server Identities VM Identities Current approach is UUIDs by vendors What happens when VM migrates
  • 10. Identity Hybrid Cloud Directory Services Identities all available in cloud directory? Access the enterprise directories? General fear to expose enterprise directory externally.
  • 11. Closing Thoughts A large number of people are likely to remember their Facebook, Gmail, Yahoo, Twitter etc. passwords than their corporate passwords to Benefits, Payroll etc. Try to remember the IRS pin you use to e-file? NIST 4 LOA is flattening?