Method and arrangement for integration of different authentication infrastructures

An integrated proxy (IAP), in a domain of telecommunication providing support for a federated single sign on infrastructure (FSSO) and an authentication and bootstrapping infrastructure (AA/BA) for authenticating access to service provider (SP) comprising:

• means for implementing a AA/BA authentication and proxy functionality;
• means for implementing support for a federated single sign on infrastructure FSSO;
• means for communication in the domain of telecommunication;
• means for determining type of user access and for setting the proxy IAP in an AA/BA or FSSO operating state.

A Bootstrapping, Identity, Authentication and Session management infrastructure (BIAS) implemented in a telecommunications network having support for a federated single sign on infrastructure (FSSO) and an authentication and bootstrapping infrastructure (AA/BA), the infrastructure BIAS arranged to provide support for authentication of a user (UE) making access to a service provider (SP) comprising:

• means for storing user credentials and a generic user security setting (GUSS) including a list of federated user pseudonyms in the FSSO infrastructure;
• means for generating authentication information and for providing authentication information to network node for authentication of user UE;
• means for generating in the infrastructure AA/BA a shared key Ks and a reference B_TID to the shared key, B_TID representative of identity of user UE;
• means for receiving a reference B_TID in request for authentication message and for generation of an asserted user pseudonym associated with user identified by reference B_TID.