« We are the Champions... | Main | Liberty à la InfoCar... »

http://blogs.sun.com/hubertsblog/date/20051208

Thursday December 08, 2005

Liberty is for real!

I usually don't stare at URLs when browsing the Internet especially if I'm doing online banking but yesterday I was paying some bills online when my eye caught something on the URL that pleased me. Look at the URL below (DON'T click on it - I modified the URL – you never know ) :

https://paymybill.wellsfargo.com/mn2_gw3_bp/billpay/application/Signon?pg=1&SAMLart=AADFwiu12qyeHqsrGO7ol4JWTTeWAh103PWjAZ2DOjA0&sessionId=12341blablaetc----&st=123456789

Not seeing anything?

Alright, below I highlighted (in red) the “interested “ aspect of this URL:

https://paymybill.wellsfargo.com/mn2_gw3_bp/billpay/application/Signon?pg=1&SAMLart=AADFwiu12qyeHqsrGO7ol4JWTTeWAh103PWjAZ2DOjA0&sessionId=12341blablaetc----&st=123456789

Hey!! Yes this is a SAML artifact that's being used for single sign-on – right there!

Actually Wells Fargo is a Sun customer for our Liberty-based Access Manager (see http://www.sun.com/software/products/access_mgr/ds_access_mgr.pdf for more info) so it's not a surprise but I think it is great to see real world deployment of the Liberty specifications (http://www.projectliberty.org). When one think of the importance of privacy and security for banks I think it is a great testimony to Liberty's work!

Posted at 09:52AM Dec 08, 2005 by Hubert Le Van Gong in Identity | Comments[5]

Comments:

Hey Hubert - the Wells deployment is really just using the SAML interfaces in Access Manager...no Liberty involved I'm afraid. - cmort

Posted by Chuck Mortimore on December 08, 2005 at 12:50 PM PST #

Hello Chuck,

I'm certainly not familiar with the specifics. I was basically guessing from this reference (http://xml.coverpages.org/SunLibertySingleSign-On200207.html) as well as the usage of what seriously looks like the SAML artifact protocol (Liberty ID-FF) to draw to the conclusion that Wells Fargo is indeed using Liberty.
Now I'll admit I'm not 100% sure but similarly things may have evolved since the time you were at Sun :-)

Best Regards,
Hubert

Posted by 192.18.42.11 on December 08, 2005 at 01:49 PM PST #

Most vendors that participate in the Liberty Alliance are missing the point on federation. I have posted my own thoughts here: http://duckdown.blogspot.com/2005/12/round-two-federated-identity.html

Posted by James on December 15, 2005 at 04:42 AM PST #

salut guy, c'est ta sister qui cause....j'ai visité ton site, je voudrais juste ajouter qu'il manque des photos de....MOI!!!!!!!!!!!! au fait: BON ANNIVERSAIRE vieille branche, ah mais non, c'est demain, bon ben je m'y suis prise en avance, faudra que je recommence demain. Au fait, je ne comprends rien à ce que tu racontes dans ton blog, c'est pire que du russe!!!!!!!!!!! Désolée, je ne peux pas te donner des conseils!!! Bises à bientôt!!

Posted by Angélique on January 20, 2006 at 05:12 AM PST #

Hubert there is a bit more to the implementation than just the saml integration as well.

Lots of super secret integrations
:)

Posted by driedtoast on September 10, 2007 at 04:20 AM PDT #

C'est la vie !