Listing of federation services The table below provides a listing of well-known federation services for authentication available within and outside the Queensland Government. **Example only, not exhaustive** Federation IdP’s or CP’s brokered Protocols Notes authentication brokered/translated service Queensland Government Queensland CP’s brokered: -> SAML Operated by DSITI Government Shop) Google SAML -> SAML Customer Microsoft Identity Queensland Government Management Account (QGA) System (CIDM) QGCIDM Step-up SMS AUSKey (via VANGuard Federation Service) Australian Business Account (ABA) (via VANGuard Federation Service) Queensland CP’s brokered: SAML -> SAML Aligns to QGAF AAL 2 for Government X-IN-CONFIDENCE Agency Employee Federation SAML -> OIDC Federated classified information IdP’s OIDC -> SAML Authentication (agency self-assessment) Agency X.509 Device Service Operated by Dimension OIDC -> OIDC Certificates (QGFAS) Data as the Prime Agency Username/Password LDAP -> SAML Services Integrator Credential Stores LDAP -> OIDC established for 1WS under IdP’s brokered: the ICT for Government X.509 -> SAML Buildings SOA Agency Employee Federation X.509 -> OIDC Will be used by other IdP’s providers on the ICT for LDAPs -> LDAPs Agency LDAP Identity Stores Government Buildings SOA to avoid with agency IdP/CP’s. Federal Government VANGuard CP’s brokered: SAML -> SAML Agencies may federate Federated directly with VANGuard or AUSKey Authentication use QGCIDM to Australian Business Account Service (FAS) certain credentials (ABA) Direct agency federations Login with ABR attributes already in place: VANGuard brokers identity DETSB for AUSKey federation between Federal and ABA business Government Departments, as well credentials for the
Listing of federation services The table below provides a listing of well-known federation services for authentication available within and outside the Queensland Government. **Example only, not exhaustive** Federation authentication service IdP’s or CP’s brokered Protocols brokered/translated Notes Queensland Government Queensland Government Customer Identity Management System (CIDM) CP’s brokered: Google Microsoft Queensland Government Account (QGA) QGCIDM Step-up SMS AUSKey (via VANGuard Federation Service) Australian Business Account (ABA) (via VANGuard Federation Service) -> SAML SAML -> SAML Operated by DSITI Shop) Queensland Government Federated Authentication Service (QGFAS) CP’s brokered: Agency Employee Federation IdP’s Agency X.509 Device Certificates Agency Username/Password Credential Stores IdP’s brokered: Agency Employee Federation IdP’s Agency LDAP Identity Stores SAML -> SAML SAML -> OIDC OIDC -> SAML OIDC -> OIDC LDAP -> SAML LDAP -> OIDC X.509 -> SAML X.509 -> OIDC LDAPs -> LDAPs Aligns to QGAF AAL 2 for X-IN-CONFIDENCE classified information (agency self-assessment) Operated by Dimension Data as the Prime Services Integrator established for 1WS under the ICT for Government Buildings SOA Will be used by other providers on the ICT for Government Buildings SOA to avoid with agency IdP/CP’s. Federal Government VANGuard Federated Authentication Service (FAS) CP’s brokered: AUSKey Australian Business Account (ABA) Login with ABR attributes VANGuard brokers identity federation between Federal Government Departments, as well SAML -> SAML Agencies may federate directly with VANGuard or use QGCIDM to certain credentials Direct agency federations already in place: DETSB for AUSKey and ABA business credentials for the
1.-Federated-identity-blueprint-overview-v100.docx