User-Managed Access (UMA): What and Why

Google Tech Talk February 28, 2012 Presented by Thomas Hardjono, Eve Maler, Maciej Machulak ABSTRACT In a nutshell, User-Managed Access (UMA) is... - A web protocol that lets you conveniently control who gets access to all your online stuff, no matter where it lives and no matter whether you're online at the moment - A Work Group of the Kantara Initiative that is free for anyone to join and contribute to - A set of draft specifications that is free for anyone to implement UMA is needed by... - Individuals, to give them a "personal data concierge" that handles requests for access to their online data, content, and services - Websites, to enable them to offer sophisticated data-sharing features to their users without having to implement those features natively - Online identity providers, to offer their users the ability to set access policies from a single place even if those users engage with dozens or hundreds of sites and apps on a regular basis This Tech-Talk... - Discusses real-life use cases for UMA - Demonstrates working UMA implementations - Reviews UMA's architecture and its relationship to the OAuth and OpenID Connect specifications