Credential Management (original) (raw)
Credential Management, also referred to as a Credential Management System (CMS), is an established form of software that is used for issuing and managing credentials as part of public key infrastructure (PKI). CMS software is used by governments and enterprises issuing strong two-factor authentication (2FA) to employees and citizens. The CMS integrates with the components of PKI to provide one joined-up solution for IT departments to issue and manage credentials to a wide selection of devices, including smart cards, USB keys, smartphones, laptops and desktop computers.
| Property | Value |
|---|---|
| dbo:abstract | Credential Management, also referred to as a Credential Management System (CMS), is an established form of software that is used for issuing and managing credentials as part of public key infrastructure (PKI). CMS software is used by governments and enterprises issuing strong two-factor authentication (2FA) to employees and citizens. The CMS integrates with the components of PKI to provide one joined-up solution for IT departments to issue and manage credentials to a wide selection of devices, including smart cards, USB keys, smartphones, laptops and desktop computers. Credential Management is also a proposed application programming interface (API) under development by the World Wide Web Consortium for standardizing aspects of how password managers used by web user agents (web browsers and other applications) create, store, use, and modify username and password combinations for logins, in addition to the management of "federated" credentials (such as single sign-on tokens) by user agents. The API is being developed by the W3C's , and has been in Working Draft status since April 2016. It is a Recommendation-track proposal, expected to become an accepted standard, but may undergo significant changes before that occurs. The Credential Management API has already been extended by the WebAuthn (Web Authentication) proposal, which reached Candidate Recommendation status in April 2018 and adds the ability to handle public-key authentication. It is common for modern web browsers to be able store and automatically enter usernames and passwords for website logins, though they have often used suboptimal heuristics for guessing which form fields and data are supposed to be filled/stored, resulting in inconsistent and sometimes faulty behavior. Browsers can also have trouble filling in login forms for federated identities, such as when a user connecting to a website uses an account for a third-party web service (like Facebook, Google, or Twitter) to authenticate and provide identity information. The Credential Management specification also aims to streamline the process of changing passwords so that the locally stored password on the client can be updated at the same time it is modified on the server. Google Chrome has included some support for Credential Management since version 51, released in May 2016, and Opera has included support since version 44, released in April 2017. Mozilla Firefox includes a subset of the API to support WebAuthn since version 60, released in May 2018. (en) |
| dbo:wikiPageExternalLink | https://www.w3.org/2011/webappsec/ https://www.w3.org/TR/credential-management-1/ |
| dbo:wikiPageID | 57404828 (xsd:integer) |
| dbo:wikiPageLength | 7287 (xsd:nonNegativeInteger) |
| dbo:wikiPageRevisionID | 908694478 (xsd:integer) |
| dbo:wikiPageWikiLink | dbr:User_agent dbr:Google dbr:Google_Chrome dbr:Mozilla_Firefox dbr:Application_programming_interface dbr:Favicon dbr:Federated_identity dbr:Public_key_infrastructure dbr:Twitter dbr:Two-factor_authentication dbr:WebAuthn dbr:Web_browser dbr:HTTPS dbr:Facebook dbr:Form_(HTML) dbr:Password_manager dbc:Internet_security dbr:JavaScript dbr:Heuristic dbr:Autofill dbc:World_Wide_Web_Consortium_standards dbr:Public-key_authentication dbr:Opera_(web_browser) dbr:World_Wide_Web_Consortium dbr:Single_sign-on dbr:OpenID_Connect dbr:Web_Application_Security_Working_Group |
| dbp:wikiPageUsesTemplate | dbt:Reflist |
| dct:subject | dbc:Internet_security dbc:World_Wide_Web_Consortium_standards |
| rdfs:comment | Credential Management, also referred to as a Credential Management System (CMS), is an established form of software that is used for issuing and managing credentials as part of public key infrastructure (PKI). CMS software is used by governments and enterprises issuing strong two-factor authentication (2FA) to employees and citizens. The CMS integrates with the components of PKI to provide one joined-up solution for IT departments to issue and manage credentials to a wide selection of devices, including smart cards, USB keys, smartphones, laptops and desktop computers. (en) |
| rdfs:label | Credential Management (en) |
| owl:sameAs | wikidata:Credential Management https://global.dbpedia.org/id/6XoGT |
| prov:wasDerivedFrom | wikipedia-en:Credential_Management?oldid=908694478&ns=0 |
| foaf:isPrimaryTopicOf | wikipedia-en:Credential_Management |
| is dbo:wikiPageWikiLink of | dbr:WebAuthn |
| is foaf:primaryTopic of | wikipedia-en:Credential_Management |