RE: [security-services] Comment on sstc-saml-glossary-2.0 (also closesAI #0114)

[Scott Cantor <cantor.2@osu.edu>]

> [proposed-definition]
> An principal's identity is said to be federated between a pair (set) of
> providers when there is agreement between the providers on an identifier
> (or a class of identifiers) and a time-period during which the 
> identifier is to be used to refer to the principal.
> [/proposed-definition]

I think "identity" is a lot of things, not just a particular identifier, but
a "federated identifier" is, well, an identifier that should meet certain
defined properties.

Perhaps we need to split that up in the glossary and talk about identity
federation separately from "federated identifier", if we even have to define
the former at all.

-- Scott