Gap Analysis Use Case 25: Inter-cloud Document Exchange and Collaboration

["Gershon Janssen" <gershon@qroot.com>]

---

This discussion thread is to start an on-list discussion on the Gap Analysis
of individual use cases. Use case numbers refer to the use cases as
described in the 'OASIS Identity in the Cloud TC Use Cases' Version 1.0,
Working Draft 02, 15 December 2011, which is available at
http://www.oasis-open.org/committees/document.php?document_id=44915&wg_abbre
v=id-cloud

The information below describes the current state. You are invited to
respond on-list to this thread with any comments, insights, additions, etc.
All input will be gathered from the list and consolidated into the next
revision of the Gap Analysis document.

---

Use Case 25: Inter-cloud Document Exchange and Collaboration

Short description:
Businesses trading with one another should be able to seamlessly establish
new electronic trading relationships via their existing cloud application
and commerce systems.  In particular, the identities, attributes and
relationships required on the various systems should be able to be set up
with zero or minimal user intervention.

Relevant applicable standards:
- SAML
- SCIM
- SPML
- IMI
- WS-Trust
- OpenID
- oAuth
- ebXML CPPA

Analysis notes:
- Distinction between Federated Identity operations and Provisioning
- Provisioning is CRUD operations on top of directories
- Federated Identity has a notion of a trusted identity providers
- Scenarios 1 and 3 relate to identity setup, and the associated attributes
- Scenario 2: re authorization to submit documents -- In identity terms,
this depends on establishing/validating a match between a pre-existing
identity in the receiver system, and a newly-provisioned identity triggered
by the sender system, based on the matching of certain attributes associated
with each of those two identities.

Possible GAPs identified:

---