Abstract:Cloud computing is a cost-effective way for organizations to access and use IT resources. However, it also exposes data to security threats. Authentication and authorization are crucial components of access control that prevent unauthorized access to cloud services. Organizations are turning to identity management solutions to help IT administrators face and mitigate security concerns. Identity management (IDM) has been recognized as a more robust solution for validating and maintaining digital identities. Identity management (IDM) is a key security mechanism for cloud computing that helps to ensure that only authorized users have access to data and resources. Traditional IDM solutions are centralized and rely on a single authority to manage user identities, which makes them vulnerable to attack. However, existing identity management solutions need to be more secure and trustworthy. Blockchain technology can create a more secure and trustworthy cloud transaction environment. Purpose: This paper investigates the security and trustworthiness of existing identity management solutions in cloud computing. Comparative results: We compared 14 traditional IDM schemes in cloud systems to explore contributions and limitations. This paper also compared 17 centralized, decentralized, and federated IDM models to explain their functions, roles, performance, contribution, primary metrics, and target attacks. About 17 IDM models have also been compared to explore their efficiency, overhead consumption, effectiveness to malicious users, trustworthiness, throughput, and privacy. Major conclusions: Blockchain technology has the potential to make cloud transactions more secure and reliable. It featured strong authentication and authorization mechanisms based on smart contracts on the Ethereum platform. As a result, it is still regarded as a reliable and immutable solution for protecting data sharing between entities in peer-to-peer networks. However, there is still a large gap between the theoretical method and its practical application. This paper also helps other scholars in the field discover issues and solutions and make suggestions for future research.

Review of Barriers for Federated Identity Adoption for Users and Organizations

Challenges with Passwordless FIDO2 in an Enterprise Setting: A Usability Study

An identity management scheme for cloud computing: Review, challenges, and future directions

A Federated Authorization Framework for Distributed Personal Data and Digital Identity

Identity theft and societal acceptability of electronic identity in Europe and in the United States

CanDID: Can-Do Decentralized Identity with Legacy Compatibility, Sybil-Resistance, and Accountability

Industry Perception of Security Challenges with Identity Access Management Solutions

Federated Single Sign-On and Zero Trust Co-design for AI and HPC Digital Research Infrastructures

On the Compliance of Self-Sovereign Identity with GDPR Principles: A Critical Review

A Federated Identity Management System with Centralized Trust and Unified Single Sign-On

None Shall Pass: A blockchain-based federated identity management system

How many FIDO protocols are needed? Surveying the design, security and market perspectives

Challenges with Securing Digital Identity

Comparative Analysis and Framework Evaluating Web Single Sign-on Systems

Smart Contract Federated Identity Management without Third Party Authentication Services

An Overview of Limitations and Approaches in Identity Management

Digital Identity in The Absence of Authorities: A New Socio-Technical Approach

A Systematisation of Knowledge: Connecting European Digital Identities with Web3

That Depends -- Assessing User Perceptions of Authentication Schemes across Contexts of Use

Trustworthy Cross-Border Interoperable Identity System for Developing Countries

A Model for Privacy-enhanced Federated Identity Management