RE: [security-services] Kerberos use cases

["John Hughes" <john.hughes@entegrity.com>]

Scott,

sorry about the delay in responding - but have just returned from a short
vacation.

The intent would to either have an applet or application hosted on the W/S
that would perform the processing.  Sections 3.2.2.1 and 3.2.2.2 in the use
case document describes the proposed processing.


John



> -----Original Message-----
> From: Scott Cantor [mailto:cantor.2@osu.edu]
> Sent: 29 October 2003 16:25
> To: 'John Hughes'; security-services@lists.oasis-open.org
> Subject: RE: [security-services] Kerberos use cases
>
>
> > 2.  Kerberos Clients/Browsers:
> >
> > 	the local environment consist of workstations that are
> > Kerberos enabled with the user using Kerberos to authenticate
> > to the local domain.  The user then wishes to access a remote
> > domain using a browser without having to be re-authenticated.
> >  The SAML 2.0 Browser profiles will be used to provide the
> > SAML assertion to the remote domain.
>
> John, in this case is the browser unmodified? If not, how can we combine a
> local Kerberos credential with a SSO flow in the browser?
>
> -- Scott
>
>
> To unsubscribe from this mailing list (and be removed from the
> roster of the OASIS TC), go to
> http://www.oasis-open.org/apps/org/workgroup/security-services/mem
> bers/leave_workgroup.php.