Auth0

In this episode, Prateek, Paul, and Joni bring us back to a time in which single sign-on across domains on the web was a brand new problem. With the confidence (and the passion!) of the people who were there and made things happen, the guests take Vittorio and the listeners on a whirlwind tour touching on the technical and political challenges they had to overcome to bring SAML to life and make it the ubiquitous success it is today. From the basics of how the SAML protocol works to the entities and standard bodies that developed it, the discussion eventually reaches modern times and concludes on how in a world where old and new standards coexist, OpenID Connect picked up the innovation torch from SAML.

Paul Madsen works on Sustainability & Identity projects at the HBAR Foundation - the grant funding arm for the public Hedera DLT

Paul Madsen

Head of Identity, HBAR Foundation

Prateek Mishra leads the security team in the Infrastructure Dept at ADP. His team architects and builds security services strategic to ADP and implemented across the enterprise. He has previously helped architect and build security and identity systems at Oracle Corporation. He is an active member of the Application Security (OWASP) and Open Source Security communities (openSSF.org). He is an originator of  the SAML standard - Editor of the SAML 1.0 and SAML 1.1 specifications and organizer of the SAML 1.0 interoperability demonstrations.  Subsequently,  he was OASIS SAML 2.0 Committee Co-Chair and Editor of the SAML 2.0 Conformance Specification. He holds a Ph.D. in Computer Science from the University of Utah. 

Prateek Mishra

Senior Director, Security Services and Architecture, ADP

Joni Brennan is President of the Digital ID & Authentication Council of Canada (DIACC).
Building on 15+ years of experience in Identity Access Management innovation, adoption, and
industry standards development, Joni helps the DIACC to fulfill its vision delivering the
resources needed to establish a digital identity ecosystem that accelerates the digital
economy, grows Canada's GDP and benefits all Canadians. Joni builds diplomatic and
impactful relationships and formalizes strategic partnerships. She has participated in
influential committees from organizations including: SCC Data Governance Initiative, OECD
ITAC, ISOC, IEEE, OASIS, ISO, and ITU-T.

Joni Brennan

President, Digital ID & Authentication Council of Canada (DIACC)

In this episode, Prateek, Paul, and Joni bring us back to a time in which single sign-on across domains on the web was a brand new problem. With the confidence (and the passion!) of the people who were there and made things happen, the guests take Vittorio and the listeners on a whirlwind tour touching on the technical and political challenges they had to overcome to bring SAML to life and make it the ubiquitous success it is today. From the basics of how the SAML protocol works to the entities and standard bodies that developed it, the discussion eventually reaches modern times and concludes on how in a world where old and new standards coexist, OpenID Connect picked up the innovation torch from SAML.


SAML with Joni Brennan, Paul Madsen and Prateek Mishra

Listen on Apple Podcasts

Blog

Visit Auth0

In Partnership with OpenID Foundation and IDPro This is Identity, Unlocked with host Vittorio Bertocci. Identity, Unlocked is the podcast that discusses identity specs and trends from a developer perspective. Identity, Unlocked is powered by Auth0. Vittorio Bertocci is Principal Architect at Auth0 and applies his vast knowledge of the identity industry to Auth0 in all aspects of the company, including internal and external education, product innovation, and customer integration. Prior to Auth0, Bertocci spent 17 years at Microsoft, where he worked on the Azure Active Directory team and focused largely on improving the developer experience. As a published author of four identity books and a highly-trafficked blog: cloudidentity.com, his forward-thinking commentary has enabled him to speak at conferences, such as Identiverse, BUILD, PDC, TechEd, Cloud Identity Summit, and many other industry events around the world.

In this episode, Dr. Daniel Fett, expert cryptographer, returns to the show to discuss the landscape of privacy-preserving measures (such as selective disclosure, zero-knowledge proofs or ZKP, etc.) that are emerging to augment existing technologies and enable new scenarios. The discussion gets very concrete when Daniel describes selective disclosure JWT, or SD-JWT, a new IETF specification he is coauthoring that offers a simple and easy-to-adopt approach to produce JWTs capable of supporting selective disclosure. Here at Identity, Unlocked, we are huge fans of this new specification, and we hope this episode will help you get started!