Managing Access to Service Providers in Federated Identity Environments: A Case Study in a Cloud Storage Service

DINIZ, Thomas, DE FELIPPE, Andre Castro, MEDEIROS, Taina, DA SILVA, Carlos and ARAUJO, Roberto (2015). Managing Access to Service Providers in Federated Identity Environments: A Case Study in a Cloud Storage Service. In: 2015 XXXIII Brazilian Symposium on Computer Networks and Distributed Systems. IEEE, 199-207.

SBRC2015-main-IEEE.pdf - Accepted Version
All rights reserved.

Download (831kB) | Preview
Official URL:
Link to published version::
Related URLs:


    © 2015 IEEE. Currently the diversity of services, which are adhering to Identity Federation, has raised new challenges in the area. Increasingly, service providers need to control the access to their resources by users from the federation as, even though the user is authenticated by the federation, its access to resources cannot be taken for granted. Each Service Provider (SP) of a federation implements their own access control mechanism. Moreover, SPs might need to allow different access control granularity. For instance, all users from a particular Identity Provider (IdP) may access the resources due to some financial agreement. On the other hand, it might be the case that only specific users, or groups of users, have access to the resources. This paper proposes a solution to this problem through a hierarchical authorization system. Our approach, which can be customized to different SPs, allows the SP administrator to manage which IdPs, or users, have access to the provided resources. In order to demonstrate the feasibility of our approach, we present a case study in the context of a cloud storage solution.

    Item Type: Book Section
    Uncontrolled Keywords: Federated Identity Environments; Cloud Computing; Access Control
    Identification Number:
    Page Range: 199-207
    SWORD Depositor: Symplectic Elements
    Depositing User: Symplectic Elements
    Date Deposited: 31 Jan 2020 12:42
    Last Modified: 18 Mar 2021 02:47

    Actions (login required)

    View Item View Item


    Downloads per month over past year

    View more statistics