User-Managed Access for the Enterprise: UMA Enables Web Access Management Modernization

Kantara Initiative announces revision 9 of the User-Managed Access (UMA) protocol and a free public webinar on March 20. When the API economy and the Internet of Things collide, how will we secure it all? UMA builds on OAuth and OpenID Connect to provide the next layer of security enterprises need.


PISCATAWAY, NJ, USA – March 18, 2014 – The User-Managed Access (UMA) protocol was originally designed to help individuals control Internet data sharing, but UMA’s notion of authorization-as-a-service can also help modern enterprises control access to sensitive resources in cloud and mobile environments.
Kantara Initiative’s UMA Work Group published revision 9 of its OAuth-based protocol on March 6 to solve a broad range of “access management 2.0” challenges, and will shortly begin interoperability testing. On Thursday, March 20, at 8am Pacific, the UMA Work Group will conduct a free public webinar sponsored by Kantara board member CA Technologies to discuss UMA’s benefits for enterprises.
Register for the webinar and find specifications and interoperability information at http://tinyurl.com/umawg. Follow along on Twitter at @UMAWG with the #UMAam20 webinar hashtag.
Scott Morrison, SVP and Distinguished Engineer at CA Technologies, comments: “The OAuth standard began an important process by letting individuals control inter-account data sharing. UMA takes this concept further, and empowers not only individuals but also organizations to control data access in highly distributed environments. We believe UMA is the missing piece in the identity puzzle and a critical part of 21st century IAM.”
Maciej Machulak, CEO of Cloud Identity and Vice-Chair of the UMA Work Group, says: “Businesses require modern and standard-based technologies to secure the increasing number of APIs and Web-accessible resources on-premise and in the Cloud. UMA gives them the right solution and easily integrates with other IAM technologies. Without a doubt, UMA will play a pivotal role in the identity space.”
“For enterprises, managing access to a vast array of APIs and websites is a daunting challenge that now extends beyond the organizational perimeter,” notes Lasse Andresen, CTO of Kantara Board Member ForgeRock. “Standards are essential for creating secure and interoperable B2B ecosystems. We are looking forward to the UMA interop and encourage other vendors to participate.”
Michael Schwartz, CEO of Gluu, says: “To date, we’ve required developers to implement most access policies in code. With UMA, people and businesses can gain back control of the process. UMA is destined to become the foundation of domain application security.”
Joni Brennan, executive director of Kantara Initiative, says the organization is “proud to host the UMA group’s work. UMA is one of our highest-profile activities, gaining attention from around the world from innovators big and small. Kantara Initiative will continue to support UMA interoperability and adoption initiatives through our open and transparent community. We invite all interested parties to join the effort!”
About Kantara Initiative
http://kantarainitiative.org/
About the UMA WG
http://tinyurl.com/umawg

###

Media Contact
Joni Brennan
732 226 4223
joni @ kantarainitiative.org