Key Mechanisms and Emerging Issues in Cloud Identity Systems

The rise in popularity and success of services based on cloud technology is evident. However, this growth has not been without its security challenges, which Cloud Service Providers (CSPs) must urgently address to earn the trust of their users. A critical area of focus is the management of user identities, ensuring that access to services is restricted to authorized individuals. This paper provides an accessible discussion on the strengths, weaknesses, and security concerns associated with prevalent identity management strategies employed by CSPs. We examine various approaches, including password-based systems, biometric verification (like fingerprint scanning), Multi-Factor Authentication (MFA), Enterprise Single Sign-On (SSO), OAuth 2.0, OpenID Connect, and SAML. Our aim is to demystify these technologies and highlight their role in securing cloud services while maintaining user convenience.