Liberty Alliance and Oracle Team to Advance Identity Governance Framework

Oracle Makes IGF Specifications Available Royalty-Free

REDWOOD SHORES, Calif. and Liberty Alliance, Feb. 7, 2007 ? Liberty Alliance, the global identity consortium working to build a more trusted Internet for consumers, governments and businesses worldwide, and Oracle today announced that Oracle has submitted the Identity Governance Framework (IGF) royalty-free to Liberty Alliance. The IGF is an open standards-based initiative developed by Oracle to help organizations better govern and protect sensitive identity-related employee, customer and partner information as it flows across heterogeneous applications. Liberty Alliance will leverage its expert groups, diverse global membership and leadership in addressing the technology, business and privacy aspects of digital identity management to further develop the IGF specifications.

“Oracle has taken the lead in developing an important framework to allow organizations of all sizes and in every market sector to better manage and protect a wide range of private identity information,” said Brett McDowell, Executive Director of the Liberty Alliance. “By developing the IGF standards in Liberty Alliance, Oracle is helping to ensure the broadest possible industry support for advancing the framework quickly.”

Oracle released a draft of the IGF in Nov. 2006 with industry support for the initiative from CA, HP, Layer 7, Novell, Ping Identity, Securent and Sun Microsystems. The IGF establishes a standard way of defining enterprise-level policies for organizations to share sensitive personal information securely and confidently between applications and diverse identity sources while helping ensure security and privacy. With the IGF, organizations can more easily determine and control how identity information ? including personally identifiable information, access entitlements and personal attributes ? is used, stored and propagated across diverse systems, helping ensure the information is easily auditable and not abused, compromised or misplaced.

“As part of its commitment to speed the development and adoption of the IGF to improve security across enterprise applications, Oracle is making the IGF specifications available royalty free,” said Prateek Mishra, Director, Identity Management Standards, Oracle. “Vendors working with Oracle and the Liberty Alliance to further develop the specification, as well as customers implementing solutions based on the specification will be able to use the IGF specifications with clarity about Oracle’s licensing intentions. This spans all of the key components of the IGF, including the CARML Specification, CARML Schema, CARML Client API and AAPML Specification.” Additional information can be found at:

The further development of the IGF within Liberty Alliance will be based on the Liberty model of creating open and secure identity standards, business and policy deployment guidelines and best practices for managing privacy in a collaborative environment where all members are invited to participate. This approach, where standards are developed only after well-defined use-cases are in place, helps to ensure the output of Liberty Alliance meets business and user requirements for interoperable, secure and privacy-respecting digital identity management solutions.

“Since its launch, vendors and customers alike have expressed enthusiasm for the IGF and view it as an effective means for better managing and protecting identity information across the extended enterprise,” said Hasan Rizvi, vice president of Identity Management and Security Products, Oracle. “Liberty’s membership – spanning vendors and customers – has significant experience in addressing the technology, business and privacy aspects of identity. Their success in driving open and secure identity standards made the consortium a natural choice for advancing the IGF specifications.”

Mishra will chair the IGF work within Liberty Alliance. He is leading a group of Liberty Alliance members working within Liberty’s Business and Marketing Expert Group to develop the scope-of-work and market requirement documentation to further advance the IGF within Liberty Alliance. The team is expecting to complete this phase of the project during 2Q 2007.

“The submission of the IGF to Liberty Alliance is an important step in its evolution and shows rapid progress since the framework was first announced less than three months ago,” said Gerry Gebel, Vice President and Service Director at Burton Group. “Now, further IGF development will be subjected to the scrutiny of Liberty’s end user organizations as they insert real world scenarios into the process.”

Organizations supporting today’s news include:

“CA is supporting the Identity Governance Framework to help customers more easily protect personal data across their disparate systems and applications,” said Andy Rappaport, Architect, Identity and Access Management at CA. “We look forward to working with the Liberty Alliance, Oracle and others to develop practical, adaptable XML-based specifications that simplify the creation, enforcement and management of identity security policies.”

“The Identity Governance Framework effort is an important step forward in addressing the sharing of sensitive identity data within an enterprise, as well as with partners, to govern privacy and compliance aspects. IGF should bring an interesting set of enhanced enterprise attribute sharing requirements to Liberty and help further improve the user centric privacy framework specifications which the organization has been working on since early 2002,” said Lena Kannappan, former chair of Liberty Services Group and CEO of FuGen Solutions, a managed identity services provider who provides pre-production scanning, testing and verification services.

“HP is very supportive of moving identity governance to an open standards body, and particularly glad this will happen in the Liberty Alliance where HP holds several leadership positions,” said Archie Reed, Director of Strategy, Identity and Access Management, HP.

“KCP believes that the Identity Governance Framework will greatly help in creating an understanding of identity management as a service. Therefore, we applaud Oracle’s decision to turn the initiative over to Liberty Alliance in order to create an open, broadly supported standard. We see a fundamental gap between application developers and the current identity management infrastructure that is causing increasingly painful security problems in business processes. In the future, the IGF will be an important part of application security, allowing applications to draw on a set of pre-defined ‘identity services’ that are tested and verified, as opposed to forcing developers to constantly reinvent the wheel,” said Tim Cole, Senior Partner, KCP.

“Luminance Consulting is very supportive of the collaboration between Oracle and the Liberty Alliance on the further development of the Identity Governance Framework. While significant progress has been made in the standardization and interoperability of identity products, a gap remains in creating standard methods to establish and audit governance of identity data and policies. As such, Luminance looks forward to contributing to Liberty’s requirements and implementation guidelines activities related to IGF,” said Andrew Shikiar, Principal, Luminance Consulting Services.

“We welcome and encourage the development of the IGF. While our own policy and design frameworks foster highly privacy-aware online services, the IGF has the potential to complement and extend what we have today. It also fits in well with the Liberty Alliance’s development of guidance to support Identity Management deployments. We look forward to seeing the standard’s finalization and deployment,” said Colin Wallis, Chair of the Liberty Alliance eGovernment Special Interest Group, Programme Manager, Authentication Standards, New Zealand Government.

“Novell welcomes Oracle’s contribution to the Liberty Alliance,” said Nick Nikols, Vice President, Product Management Identity and Security, Novell, Inc. “We continue to look forward to working with Oracle and the other leaders in the identity management market in the development of an open identity framework.”

“Ping Identity was thrilled to hear that Oracle is submitting IGF to the Liberty Alliance,” said Patrick Harding, Ping Identity CTO. “We recently also strengthened our partnership with the Liberty Alliance by becoming a Liberty sponsor. We are looking forward to continuing working on IGF from within Liberty.”

“Securent is pleased to support the submission of the IGF specifications for continued development within the Liberty Alliance which has a solid track record of nurturing and delivering open and secure identity standards,” said Sekhar Sarukkai, founder and CTO of Securent. “As the industry leader in entitlement management, Securent will contribute its expertise, gathered from many Fortune 500 customer deployments, to help deliver a compelling standard for protecting identity-related information.”

“We’re very pleased to see that Oracle has submitted the Identity Governance Framework to the Liberty Alliance,” said Don Bowen, director of Identity Integration for Sun Microsystems, Inc. “Sun believes Liberty is well suited because of its business and technical experts from all verticals, including government. Its work in the area of data privacy is not only valuable, but essential.”

“As a member and long-time supporter of Liberty Alliance, Symlabs believes that great benefit comes from cooperation between companies seeking to address the complex problem of creating trusted environments that both share and protect sensitive information. IGF is a welcome initiative to take the expression of the attribute requirements and policies to the next level. Liberty Alliance protocols were always meant to work in a framework of policy descriptions. The universe needing these solutions embraces business, government, academic, and personal applications, so the benefits derived from IGF and Liberty Alliance working together will go far,” said Sampo Kellomaki, Chief Identity Architect, Symlabs, Inc.

About Liberty Alliance

Liberty Alliance is a global identity consortium with a membership base that includes technology vendors, consumer service providers and educational and government organizations working together to build a more trusted Internet by addressing the technology, business and privacy aspects of digital identity management. The Liberty Alliance Management Board consists of representatives from AOL, Ericsson, Fidelity Investments, France Telecom, HP, Intel, Novell, NTT, Oracle, and Sun Microsystems. Liberty’s four Expert Groups are the Technology Expert Group (TEG), the Public Policy Expert Group (PPEG), the Strong Authentication Expert Group (SAEG) and the Business and Marketing Expert Group (BMEG). Members form special interest groups based on the need to solve regional and global identity issues and include the eGovernment, eHealth, Identity Theft Prevention and Open Source groups. More information about Liberty’s membership structure as well as information about how to become a member is available

About Oracle

Oracle (NasdaqGS: ORCL) is the world’s largest enterprise software company. For more information about Oracle, please visit our Web site at



Oracle, JD Edwards, PeopleSoft, and Siebel are registered trademarks of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners.


Please enter your comment!
Please enter your name here