Eve Maler
- Co-inventor of XML (W3C)
- Author of the User-Managed Access (UMA) specifications at Kantara Initiative
- Former CTO at ForgeRock
Bio
Eve Maler has shaped identity standards for over two decades. Best known in the identity world as author of the User-Managed Access (UMA) specifications, which extend OAuth to support consent and delegation patterns. Earlier in her career she was one of the original co-inventors of XML at Sun Microsystems.
Profile built from public Kantara Initiative and W3C records.
Where their work shows up
User-Managed Access extends OAuth to consent and delegation patterns where the resource owner is not present at the moment of access, which is exactly the shape the issuer, holder, verifier model and consent management requirements later needed. Her earlier XML work sits under SAML 2.0.
Related on Start with Identity
- CVEKeycloak UMA policy privilege escalation
Keycloak's UMA policy engine checked only the first resource in a request (CWE-266). Additional resources skipped the check. A privilege escalation in user-mana
- ExpertChairman
Nat Sakimura has chaired the OpenID Foundation for many years and is a primary author of the OpenID Connect specifications and the FAPI security profile used by
- ExpertCo-author of TLS 1.0 and the W3C DID specification
Christopher Allen co-authored the IETF TLS 1.0 specification, co-authored the W3C Decentralized Identifiers specification, and in 2016 published The Path to Sel
- ExpertCo-chair, OpenID Shared Signals working group
Annabelle Backman is a principal security engineer on AWS Identity and co-chairs the OpenID Shared Signals and Events working group. She edited RFC 8935 and RFC