Advanced Policies for the Administrative Delegation in Federated Environments

Abstract

In existing federated identity management systems it is more and more necessary new set of advanced policies, such as policies for the administrative delegation. They allow administrators to delegate a subset of the system policies management to other users, who will have a much wider knowledge in the application area where these policies will be applied. In this paper, we present an infrastructure that manages the complete life cycle of the administrative delegation policies, as well as a way for reducing the complexity in their management for some scenarios, where these users do not have to be experts in the subject area. These users will only have to fill in a simple template, which is automatically generated from the administrative policy created by the administrator.