Multi-Tenancy Authorization System with Federated Identity for Cloud-Based Environments Using Shibboleth

TLDR

Cloud services can increase enterprise efficiency and cost‑effectiveness, but privacy concerns arise when data reside outside the client domain, necessitating robust access control. The study aims to provide identity management based on digital identity federation to enable authentication and authorization for access control in cloud computing environments. It employs digital identity federation to authenticate and authorize access to cloud services for independent, trusted third parties. Keywords: cloud computing, identity management, multi‑tenancy, federation, Shibboleth, access control, authentication, authorization.

Abstract

The services provided in clouds may represent an increase in the efficiency and effectiveness in the operations of the enterprise business, improving the cost-effectiveness related to services and resources consumption. However, there is concern about the privacy of data, since such data are outside the client's domain. For these services to be effectively enjoyed by organizations it is necessary to provide access control. The objective of this work is to provide identity management, based on digital identity federation, with authentication and authorization mechanisms for access control in cloud computing environments to independent, trusted third-parties. Keywords-cloud computing; identity management; multi- tenancy; federation; Shibboleth; access control; authentication; authorization.