The Identity Governance Framework was a project of the

Liberty Alliance The Liberty Alliance Project was an organization formed in September 2001 to establish standards, guidelines and best practices for identity management in computer systems. It grew to more than 150 organizations, including technology vendors, ...

for standards to help enterprises determine and control how identity information is used, stored, and propagated using protocols such as

LDAP The Lightweight Directory Access Protocol (LDAP ) is an open, vendor-neutral, industry standard application protocol for accessing and maintaining distributed directory information services over an Internet Protocol (IP) network. Directory servi ...

SAML Security Assertion Markup Language (SAML, pronounced ''SAM-el'', ) is an open standard for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider. SAML is an XML-based m ...

, and

WS-Trust WS-Trust is a WS-* specification and OASIS standard that provides extensions to WS-Security, specifically dealing with the issuing, renewing, and validating of security tokens, as well as with ways to establish, assess the presence of, and broker t ...

and ID-WSF.

Purpose

The Identity Governance Framework (IGF) enables organizations to define policies that regulate and control the exchange of identity information between application systems both internally and with external partners. Identity information may include things like names, addresses, social security numbers or other information that would be otherwise considered related to an individual's identity. The policy information is both useful to privacy auditors for assessing the use of identity information in applications and to policy enforcement systems for ensuring that appropriate use of identity information takes place.

History

IGF was originally announced by Oracle i
November, 2006
as a joint initiative between CA, HP, Layer 7 Technologies, Novell, Oracle, Ping Identity, Securent, and Sun Microsystems. In February, 2007, the initiative was transferred to the

to take the draft proposal forward and fully develop the standard. In July, 2007, Liberty announced completion of th
Market Requirements Use Case
documentation. In June, 2008, Liberty Allianc
announced
publication o
draft specifications
for CARML and Privacy Constraints. In November, 2008, Project Aristotl
announced release 1.0
of th
ArisID API
implementing the draft specifications for IGF. Se
project FAQ
for more information. In November, 2009, Liberty Alliance publishe
final specifications
of IGF components CARML (Client Attribute Requirements Markup Language) and IGF Privacy Constraints. In December, 2009, Project Aristotle published ArisID, an implementation of IGF 1.
release 1.1
Liberty Alliance publishe
final specifications
of IGF components CARML (Client Attribute Requirements Markup Language) and IGF Privacy Constraints in the fall of 2009. Ongoing standards work is now being handled by the Kantara Initiative
LSM Working Group
An implementation of CARML and IGF Privacy Constraints was available throug
Project Aristotle
, a
Apache 2.0 Licensed
open source project. Release 1.1 was released December 2009.

External links

*Liberty Allianc
Identity Governance Strategic Initiative
*OpenLibert
Project Aristotle
{{Webarchive, url=https://web.archive.org/web/20090220221821/http://www.openliberty.org/wiki/index.php/ProjectAris , date=2009-02-20 *Oracle Technology Networ

Purpose

History

External links

Further reading