Identity Governance Framework
The Identity Governance Framework was a project of the Liberty Alliance for standards to help enterprises determine and control how identity information is used, stored, and propagated using protocols such as LDAP, SAML, and WS-Trust and ID-WSF.
Purpose
The Identity Governance Framework (IGF) enables organizations to define policies that regulate and control the exchange of identity information between application systems, both internally and with external partners.{{Cite web |last=OWinfreyATL |date=2023-09-21 |title=Microsoft Entra ID Governance - Microsoft Entra |url=https://learn.microsoft.com/en-us/azure/active-directory/governance/identity-governance-overview |access-date=2023-10-11 |website=learn.microsoft.com |language=en-us}} Identity information may include things like names, addresses, social security numbers or other information that would be otherwise considered related to an individual's identity.
The policy information is both useful to privacy auditors for assessing the use of identity information in applications and to policy enforcement systems for ensuring that appropriate use of identity information takes place.
History
IGF was originally announced by Oracle in [http://www.oracle.com/corporate/press/2006_nov/identity-governance-framework.html November, 2006] as a joint initiative between CA, HP, Layer 7 Technologies, Novell, Oracle, Ping Identity, Securent, and Sun Microsystems.
In February 2007, the initiative was transferred to the Liberty Alliance to take the draft proposal forward and fully develop the standard.
In July 2007, Liberty announced completion of the [http://www.projectliberty.org/index.php/liberty/news_events/press_releases/industry_leaders_submit_identity_governance_framework_to_openliberty_org_for_development_of_open_source_implementations Market Requirements Use Case] documentation.
In June 2008, Liberty Alliance [http://www.projectliberty.org/liberty/news_events/press_releases/liberty_alliance_announces_first_release_of_identity_governance_framework_components announced] publication of [http://www.projectliberty.org/liberty/resource_center/specifications/igf_1_0_specs draft specifications] for CARML and Privacy Constraints.
In November 2008, Project Aristotle [http://www.projectliberty.org/liberty/news_events/press_releases/openliberty_org_releases_first_open_source_identity_governance_framework_software announced release 1.0] of the {{usurped|1=[https://web.archive.org/web/20090220221821/http://www.openliberty.org/wiki/index.php/ProjectAris ArisID API]}} implementing the draft specifications for IGF. See {{usurped|1=[https://web.archive.org/web/20090419223807/http://www.openliberty.org/wiki/index.php/ArisIdFAQ project FAQ]}} for more information.
In November 2009, Liberty Alliance published [http://www.projectliberty.org/resource_center/specifications/igf_v1_0_final/ final specifications] of IGF components CARML (Client Attribute Requirements Markup Language) and IGF Privacy Constraints.
In December 2009, Project Aristotle published ArisID, an implementation of IGF 1.0 [http://idgov.sourceforge.net release 1.1].
Liberty Alliance published [http://www.projectliberty.org/resource_center/specifications/igf_v1_0_final/ final specifications] of IGF components CARML (Client Attribute Requirements Markup Language) and IGF Privacy Constraints in the fall of 2009. Ongoing standards work is now being handled by the Kantara Initiative, [http://kantarainitiative.org/confluence/display/WGLSM/Charter LSM Working Group]
An implementation of CARML and IGF Privacy Constraints was available through {{usurped|1=[https://web.archive.org/web/20090220221821/http://www.openliberty.org/wiki/index.php/ProjectAris Project Aristotle]}}, an [http://www.apache.org/licenses/#clas Apache 2.0 Licensed] open source project. Release 1.1 was released in December 2009.
References
{{Reflist}}
External links
- Liberty Alliance [http://www.projectliberty.org/liberty/strategic_initiatives/identity_governance Identity Governance Strategic Initiative]
- OpenLiberty {{usurped|1=[https://web.archive.org/web/20090220221821/http://www.openliberty.org/wiki/index.php/ProjectAris Project Aristotle]}}
- Oracle Technology Network [http://www.oracle.com/technology/tech/standards/idm/igf/index.html IGF Page]
Further reading
- Sarbanes-Oxley Compliance Journal - January 3, 2007 - [http://www.s-ox.com/News/detail.cfm?articleID=2233 Open Initiative to Help Organizations Govern Identity Information Across Enterprise Applications]
- Network World - July 30, 2007 - [http://www.networkworld.com/newsletters/dir/2007/0730id1.html Identity Governance Framework sprints to the finish line]
- Sarbanes-Oxley Compliance Journal - January 24, 2008 - [http://www.s-ox.com/dsp_getFeaturesDetails.cfm?CID=2012 Identity Governance Framework - Liberty Alliance's Initiative Addressing Privacy and SOX]
- ZDNet Dana Blankenhorn Blog - November 19, 2008 - [https://archive.today/20130210083319/http://blogs.zdnet.com/open-source/?p=3100 Will identity be open source?]