Global Federated Identity and Privilege Management (GFIPM): Terminology Matrix

• NCJ Number: 307246
• Date Published: April 2012
• Length: 17 pages
• Publication Series: Justice Information Sharing
• Publication Type: Reference Material

Annotation

This document addresses the needs of justice organizations seeking ways to provide secured access to multiple agency information systems with one single logon; it is divided into five sections including references, GFIPM roles and responsibilities, service-oriented architecture terminology map, additional GFIPM terms and definitions; it also includes an appendix detailing the document history.

Abstract

As the Terminology Matrix for Global Federated Identity and Privilege Management (GFIPM), this document provides a terminology and concept map between GFIPM and other prominent paradigms in the areas of identity management, privilege management, and service-oriented architecture. The document’s purpose is to help GFIPM stakeholders gain a better understanding of the various technical terms by mapping each GFIPM term to the corresponding terms from other technologies. Its target audience includes managers and technical representatives of prospective GFIPM participant organizations who intend to implement an identity provider (IDP) and/or a service provider (SP) within a GFIPM federation. The target audience also includes vendors, contractors, and consultants who are required to establish technical interoperability with GFIPM standards as part of their project or product implementation. The GFIPM framework provides the justice community and its partner organizations with a standards-based approach for implementing federated identity. Common use of these standards across federation systems is crucial to their interoperability. Leveraging the Global Justice XML and National Information Exchange Model (NIEM), a standard set of XML-based elements and attributes (collectively referred to as GFIPM metadata) about a federation user’s identities, privileges, and authentication can be universally communicated.