Client-based CardSpace-Shibboleth Interoperation

Haitham Al-Sinani, Chris J Mitchell

Research output: Book/ReportOther report

88 Downloads (Pure)


Whilst the growing number of identity management systems have the potential to reduce the threat of identity attacks, major deployment problems remain because of the lack of interoperability between such systems. In this paper we propose a simple, novel scheme to provide interoperability between two of the most widely discussed identity systems, namely CardSpace and Shibboleth. In this scheme, CardSpace users are able to obtain an assertion token from a Shibboleth-enabled identity provider that can be processed by a CardSpace-enabled relying party. We specify the operation of the scheme and also describe an implementation of a proof-of-concept prototype. Additionally, security and operational analyses are provided.
Original languageEnglish
PublisherDepartment of Mathematics, Royal Holloway, University of London
Number of pages25
Publication statusUnpublished - 24 May 2011

Publication series

NameTechnical Report Series
PublisherMathematics Department, Royal Holloway

Cite this