1 / 4

Submission to Sprint Innovate: Why Sprint should support Ope

The Gluu Server subscription enables organizations to more easily implement single sign-on, multi-factor authentication, and web access management using open web standards and open source software.

gluu
Download Presentation

Submission to Sprint Innovate: Why Sprint should support Ope

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Sprint should support the OpenID Connect protocol for authentication. Sprint has a lot of customers. Telco’s are in a superlative position to authenticate people using mobile devices. However, how can websites use the sprint.com domain to authenticate people? I suggest Sprint aligns with the OpenID Connect standard. Further I propose that Sprint use the open source OX platform to do this. Google open sources the client API to authenticate people, but it doesn’t publish the server code it uses. The Gluu project provides the best implementation of the new OpenID Connect protocol. Sprint should align with the same authentication protocol as Google, Facebook, Yahoo and Microsoft, and other consumer IDPs. There is no point in writing your own code to implement OpenID Connect when you can use open source software. And by supporting open source, you can help the ecosystem. Submission to Sprint Innovate: Why Sprint should support OpenID Connect

  2. Frankly you have no interest in your partners doing a bad job of authentication. Its a win win… Gluu is a small company. We are struggling to fund this open source software and maintain our lead. I think there are several ways we could help Sprint, and you can help Gluu, and that you can help make the Internet a safer place by opening up your platform for third party authentication. Q & A — The specifics of your Opportunity: Who are your competitors? Our competitors include Ping Identity, ForgeRock, CA SiteMinder, IBM Tivoli Access Manager, RSA ClearTrust, Oracle Access Manager, OneLogin, Okta, StormPath What differentiates your solution from your competitors? There is only one other open source platfrom: ForgeRock. That platform was designed in the early 2000s. It is not easy, and it doesn’t support the new OAuth2 profiles (OpenID Connect / UMA) that are needed by mobile developers. What would be the benefit of using this solution?

  3. Sprint could support standard API’s for authentication and authorization, and enable an ecosystem of partners to authenticate Sprint customers via Internet standard API. How is this better than Sprint’s current solution? Supporting standards is important because we live in a world where there are multiple consumer IDPs, and if a website needs a special API to use your IDP, it will probably just not support you. What is the cost of your solution? Gluu sells support on its product. However, I think there might be some sponsored co-development opportunities. Who are some of your current customers? • Toshiba uses Gluu to deliver authentication for its Cloud TV Service in Japan and Europe (and soon in the US). We have more than 20 university customers, in addition to a number of large enterprise customers.

  4. We also are designing an authentication/authorization platform for the State of TX K-12 students, and a citizen authentication platform for the Philippines (90M users). In the telecom industry, we worked with British Telecom on a multi-year VOIP project, and have advised Rackspace on the design of their authentication system. Do you have any additional information or comments? Please check the latest OpenID Connect test results. Look in the last column for Gluu, and you can see that our server is currently the most comprehensive implementation of an OpenID Connect Provider. Article Resource:-http://thegluuserver.wordpress.com/2013/11/22/submission-to-sprint-innovate-why-sprint-should-support-openid-connect/

More Related