User-Managed Access (UMA): What and Why
Google Tech Talk
February 28, 2012
Presented by Thomas Hardjono, Eve Maler, Maciej Machulak
ABSTRACT
In a nutshell, User-Managed Access (UMA) is...
- A web protocol that lets you conveniently control who gets access to all your online stuff, no matter where it lives and no matter whether you're online at the moment
- A Work Group of the Kantara Initiative that is free for anyone to join and contribute to
- A set of draft specifications that is free for anyone to implement
UMA is needed by...
- Individuals, to give them a "personal data concierge" that handles requests for access to their online data, content, and services
- Websites, to enable them to offer sophisticated data-sharing features to their users without having to implement those features natively
- Online identity providers, to offer their users the ability to set access policies from a single place even if those users engage with dozens or hundreds of sites and apps on a regular basis
This Tech-Talk...
- Discusses real-life use cases for UMA
- Demonstrates working UMA implementations
- Reviews UMA's architecture and its relationship to the OAuth and OpenID Connect specifications