• Application Authentication
– Two-factor authentication
• two independent factors (that is, pieces of information or
processes) are used to identify a user.
– A single sign-on system
• allows the user to be authenticated once, and multiple
applications can then verify the user’s identity through an
authentication service without requiring reauthentication.
• The Security Assertion Markup Language (SAML)
– A standard for exchanging authentication and authorization information
between different security domains, to provide cross-organization single
sign-on.
• The OpenID standard
– An alternative for single sign-on across organizations, and has seen
increasing acceptance in recent years.
– A large number of popular Web sites, such as Google, Microsoft, Yahoo!,
among many others, act as OpenID authentication providers.