Plugging a Scalable Authentication Framework into Shibboleth

Zhang, Nan; Yao, Li; Chin, Jay; Shi, Qichen; Nenadić, Aleksandra; McNab, A.; Rector, Alan L.; Goble, Carole

doi:10.1109/wetice.2005.48

Cited by 3 publications

(2 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Although there are several products for MFA, to the best of our knowledge, there is not a standardized way of integrating them into a Shibboleth IdP. Among MFA solutions for the Shibboleth framework, it is possible to find: FAME [17]; Multi-Context Broker (MCB) [18]; Authentication Flow Selection [19]; and the practical experiment described in [20]. FAME framework [17] enables multi-factor and multilevel authentication in Shibboleth.…”

Section: Related Workmentioning

confidence: 99%

“…Among MFA solutions for the Shibboleth framework, it is possible to find: FAME [17]; Multi-Context Broker (MCB) [18]; Authentication Flow Selection [19]; and the practical experiment described in [20]. FAME framework [17] enables multi-factor and multilevel authentication in Shibboleth. FAME adds the authentication factors Level of Assurance (LoA) in the generated SAML assertion.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Multi-factor authentication for shibboleth identity providers

Mello

Wangham

Loli

et al. 2020

J Internet Serv Appl

View full text Add to dashboard Cite

The federated identity model provides a solution for user authentication across multiple administrative domains. The academic federations, such as the Brazilian federation, are examples of this model in practice. The majority of institutions that participate in academic federations employ password-based authentication for their users, with an attacker only needing to find out one password in order to personify the user in all federated service providers. Multi-factor authentication emerges as a solution to increase the robustness of the authentication process. This article aims to introduce a comprehensive and open source solution to offer multi-factor authentication for Shibboleth Identity Providers. Based on the Multi-factor Authentication Profile standard, our solution provides three extra second factors (One-Time Password, FIDO2 and Phone Prompt). The solution has been deployed in the Brazilian academic federation, where it was evaluated using functional and integration testing, as well as security and case study analysis.

show abstract

Section: Related Workmentioning

confidence: 99%