Cover art for Federation at the Oasis

WPA3-KCIA Radio · Single

Federation at the Oasis

Jarrett Heintz · 6:49

  • Identity & Access
  • Everything, A to Z
  • Identity Hour
Play on WPA3-KCIA Radio

Lyrics

  1. You slip into your domain, Kerberos unlocked, SSO and tickets.
  2. You've got permission to start.
  3. But then you want to leave and go to places out your home.
  4. How will you be able to comfortably go roam?
  5. SAML by Oasis.
  6. Inside your castle domain, keys on your keychain.
  7. Kerberos ticket's humming like a midnight train.
  8. TGK in your pocket, service pass in hand.
  9. But beyond your walls, who will understand?
  10. Claims-based identity carries your true name.
  11. Trust that travels far is the federation game.
  12. Home realm discovery asks, "Where are you from?" Point to your identity home so the dance can run.
  13. Auth and req requests forming, relay state in tow.
  14. Browser as the courier, off we go.
  15. Federation, take me where I go.
  16. SAML by Oasis, let assertions flow.
  17. IP to SP, I know that it's you.
  18. Signed and time boxed, now the gate swings true.
  19. Hack- IP door, SSO lights the way.
  20. Or you sign in once, then the IP says okay.
  21. Assertion gets crafted, subject audience too.
  22. Not before, no, nor after, tell the time what's true.
  23. Host to the ACS, binding set just right.
  24. Signature and cert check, welcome to the site.
  25. Federation, take me where I go.
  26. SAML by Oasis, let assertions flow.
  27. IP to SP, I know that it's you.
  28. Signed and time boxed, now the gate swings true.
  29. Compare the cousins and don't get confused.
  30. OAuth grants access to APIs you use.
  31. OpenID Connect adds who you are in play.
  32. ID token as a JWT to say the US Fed is older.
  33. Sign-in moves people around, each fills a purpose, keep your acronyms sound.
  34. Who are you?
  35. EP says you.
  36. Can I trust it?
  37. SP validates it.
  38. Is it fresh in time?
  39. Not before, not after a line.
  40. Any tamper in here?
  41. XMLD sig, the signature's clear.
  42. Safe on the wire.
  43. TLS strong, no unwanted buyer.
  44. Federation, take me where I go.
  45. SAML by Oasis, let assertions flow.
  46. IP to SP, I know that it's you.
  47. Signed and time boxed, now the gate swings true.
  48. Pack your claims on a camel, cross dunes with ease.
  49. SAM-EL rhymes with camel, drifting in the breeze.
  50. Under desert stars, you roam beyond home.
  51. Federation singing, you're clear to roam.