federated identity

Article 5 of this series will show how to extend the AAP to support a number of other tokens and validate them using Tivoli Federated Identity Manager.

本系列的第5篇将展示如何扩展AAP，以支持很多其他标志和使用Tivoli Federated Identity Manager验证它们。

The vision of Federated Identity invokes exciting possibilities, however John concludes the article with some sobering advice

FIM的前景充满各种令人激动的可能性，不过John还是以一些严肃清醒的建议来结束他的文章

Service security focuses on managing the federated identity and access control across services, securing access to services and applications, and consistently enforcing security policies for services.

服务安全性的重点是管理联合标识和跨服务的访问控制、确保能安全访问服务和应用程序，以及使服务的安全策略得到一致执行。

Federated identity thus "weaves together" multiple elements and domains, much like a fabric.

借此联邦身份就把多种元素和领域交织在一起，就像织布一样。

It also has a second set of policy set and bindings for configuring message-level security to the Tivoli Federated Identity Manager trust service.

客户端还有第二组策略集和绑定，用于配置Tivoli Federated Identity Manager信任服务的消息级安全性。

More complex translations of user identity from one domain to another are typically performed by an external capability, such as Tivoli Federated Identity Manager.

从一个域到另一个域的更复杂的用户身份转换通常由一种外部功能执行，比如Tivoli Federated Identity Manager。

Federated identity management is a standards-based technology and information technology process that enables distributed identification, authentication, and authorization across organizational and platform boundaries.

联合身份管理是一项基于标准的技术和信息技术过程，它允许跨组织边界和平台边界进行分布式标识、身份验证以及授权。

SAML is generally considered to be a Web services standard, although in fact it provides an overall structure for the management of federated identity that is platform and protocol independent.

SAML通常被认为是一项Web服务标准，不过事实上，它却提供了独立于平台和协议的联合标识的总体管理结构。

This section discusses deeply the system of the federated identity management including the identity management architecture provided with federation function, federated network identity and the concept of confidence circle.

深入研究了联邦身份管理系统，主要包括具有联邦功能的身份管理架构，联合网络身份和信任圈的概念。

The article presents the policy sets and bindings required for the client and provider, as well as the Tivoli Federated Identity Manager trust service chain configuration needed to issue a SAML token.

本文展示了客户端和提供者所需的策略集和绑定，以及发放SAML令牌所需的Tivoli Federated Identity Manager信任服务链配置。

The solution for these partners included a Federated Identity model where the Consuming Application authenticates its local users and makes web services requests asserting an employee's identity.

这些合作伙伴的解决方案包括联合的身分（Federated Identity）模型，在这个模型中，消费应用程序（Consuming Application）验证它的本地用户并使Web服务请求断言雇员的身份。

Securing the communication with the Tivoli Federated Identity Manager security token service is recommended to protect the integrity and confidentiality of the message.

建议保护与Tivoli Federated Identity Manager安全令牌服务之间的通信，以保护消息的完整性和私密性。

Tivoli Federated Identity Manager provides a simple single point to manage identities and resource access in a trusted fashion.

Tivoli Federated Identity Manager提供了以可靠方式管理身份和资源访问的单点管理。

To create and configure trust service chains, complete the following steps from the administrative console of the Tivoli Federated Identity Manager

要创建和配置信任服务链，请在Tivoli Federated Identity Manager的管理控制台中完成下面的步骤

IBM Tivoli Federated Identity Manager ( TFIM) provides a simple, loosely-coupled model for managing identity and access to resources that span companies or security domains.

IBM Tivoli Federated Identity Manager（TFIM）通过一个简单的松散耦合的模型跨公司和安全域管理身份和资源访问。

To scale the number of connections and limit the prolif ­ eration of credentials in a federated identity, cloud service providers must likewise move to a one-to-many model.

要在联邦身份结构下升级连接的数量并控制凭证的增长，云服务提供者必须也迁移到单对多模型。

A revolutionary approach to identity management-a federated identity fabric-spans enterprise and cloud boundaries.

而一种革命性的身份管理方式联邦式身份认证结构可以跨越企业和云端的界限。

IBM Tivoli Federated Identity Manager ( ITFIM) supports the centralized management of identities and provides users with simplified access to information and services in a trusted fashion.

IBM Tivoli Federated Identity Manager（ITFIM）支持标识的集中管理，为用户提供一种以可信的方式访问信息和服务的简便方法。

In this article, you'll configure a Tivoli Federated Identity Manager trust service chain to issue SAML tokens using bearer subject confirmation.

在本文中，您将配置一个Tivoli Federated Identity Manager信任服务链，通过不记名主体确认（bearer subject confirmation）功能发放SAML令牌。

Technology validation system is designed and implemented, which implemented the key technologies of federated identity management and service invocation authentication, and validated the feasibility of the technologies.

设计实现了验证系统，对本文中的联盟身份管理关键技术和服务调用认证关键技术进行了实现，验证了其技术的可行性。

It would require, he thought, federated identity and security: "in effect, a single sign-on across multiple systems spanning multiple companies."

他认为，这需要统一的身份识别和安全措施：“实际上，只需要把跨越多家公司的多个系统联合起来。”