Kerberos is network authentication protocol, for client-server application by using secret key cryptography.
Nodes prove their identity using a ticket.
Like we showing our ID at an office and getting a visitor pass.
Identity Federation
Connects different identity management systems together. A central location for users’ identities.
So that users can use same credentials across multiple platforms.
2 components of IF
1 – Service provider (SP) : Applications/services that users want to use
2 – Identity Provider (IDP) : Where user information stored who want to use the applications, like Okta, Microsoft ADFS; Google and Facebook are free IDPs.
SAML & SSO
SAML
XML based markup language, provides authentication and authorization between service provider and identity provider.
SAML returns assertions from IDP, when a user try to access any service from SP.
Web Services Federation & OAuth
WS-Fed
Similar to SAML, better
OAuth
