"To securely and efficiently tie a federated identity and an equivalent X.509 identity together based on values found in the federated identity"

Confusa provides an easy way to get a x.509 certificate based on attributes released from an identity provided (IdP).  Using an established identity federation makes sense in several ways

1. The users already have one well-maintained identity.
2. We do not have to maintain our own user database.
3. It scales to a large number of users.

From the very beginning, we have tried to adhere to the following "design mantra":

• Simplicity. The workflow should be natural and self-explanatory.
• Security. It should not be possible to retrieve other peoples keypair, nor should it be possible to deny legitimate users access.
• Scalability. The portal should be able to handle a very large number of users. In fact, it should handle an arbitrary number of users without affecting performance. 

Confusa is released under the GPLv3 license. This makes it possible to use Confusa in most circumstances.