Tech-invite 3GPPspace IETFspace

◀ ▶ 21 22 23 24 25 26 27 28 29 31 32 33 34 35 36 37 38 4‑5x

TR 33.995
Study on Security aspects
of integration of Single Sign-On (SSO) Frameworks
with 3GPP Operator-controlled Resources and Mechanisms

3GPP‑Page ETSI‑search fToC_↓ Partial Content _→

V19.0.0 (PDF) 2025/09 39 p.

V18.0.0 2024/03 39 p.

V17.0.0 2022/03 39 p.

V16.0.0 2020/06 39 p.

V15.0.0 2018/06 38 p.

V14.0.0 2017/03 39 p.

V13.0.1 2017/03 39 p.

Rapporteur:: Mr. Lehtovirta, Vesa
Ericsson LM

full Table of Contents for TR 33.995 Word version: 19.0.0

each clause number in 'red' refers to the equivalent title in the Partial Content

Scope p. 5

References p. 5

Definitions and abbreviations p. 6

3.1	Definitions p. 6
3.2	Abbreviations p. 6

Relation of the present study to other related work in 3GPP p. 6

Requirements identified in the present study p. 7

Solutions for Liberty Alliance/SAML - 3GPP interworking p. 7

6.1	General p. 7

Solutions for OpenID - 3GPP interworking p. 7

General p. 7

GBA Lite p. 7

Rationale for solution p. 7

Solution description p. 8

7.2.2.1	Architecture p. 8
7.2.2.2	BSF Implementation optimizations p. 8
7.2.2.3	Message Flow p. 9

Evaluation against SA1 requirements p. 10

Third Party IdP binding for two-factor authentication p. 10

Rationale for solution p. 10

Solution 1 description p. 12

7.3.3.1	General p. 12
7.3.3.2	Example solutions for two factor authentication p. 14

Solution 2 description p. 18

7.3.4.1	Solution based on OpenID-GBA interworking where OTT performs username/password authentication p. 18
7.3.4.2	Solution based on OpenID-GBA interworking where MNO performs both GBA and username/password authentication p. 19

Evaluation against SA1 requirements p. 21

Using user consent for GBA and SSO p. 23

Rationale for solution p. 23

Solution description p. 23

7.4.2.1	General p. 23
7.4.2.2	GBA_ME-based solution p. 24
7.4.2.3	GBA_U-based solution p. 25

Functional Architecture p. 27

Evaluation against SA1 requirements p. 29

3rd party SSO identity mapping p. 31

7.5.1	Rationale for solution p. 31
7.5.2	Solution description p. 31
7.5.3	Evaluation against SA1 requirements p. 33

Conclusions p. 35

Change History p. 36