The pipeline company has an application that the individual
gas producers log in to and use to buy space in
the pipeline to move their gas. Currently, the pipeline
company creates an account for each employee that
each gas producer wants to allow access to the system.
This, as one would expect, is a heavily inef?¬?cient
331
system. In addition, with people coming and going from
the gas producers all the time, the pipeline company
incurs a great deal of manual work. Worse yet, although
standard practice inside each of the gas producers is to
disable the accounts of employees when they leave, it
takes weeks often to inform the gas pipeline company. In
oil/gas economy cities such as Calgary and Houston,
where these gas producers are concentrated, people will
move around between them all the time. Whereas their
employment contracts surely prohibit them from accessing
the pipeline system using their old credentials, the
system doesn??™t??”until the pipeline company is noti?¬?ed.
This gaping hole in security could be closed by switching
to a federated identity model. Each of the gas producers
could issue their employees an Information Card,
and the gas producer??™s STS would emit claims into the
security token that the employee was able to perform
certain tasks in the pipeline system on behalf of the gas
producer.
Pages:
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475