Re: [security-services] Additional SSO Scenarios from GUIDE prject([Fwd: FW: OASIS vs GUIDE])

["Eve L. Maler" <Eve.Maler@Sun.COM>]

Okay, as promised, a small handful of thoughts on the GUIDE scenarios.

Scenario 1 describes classic situations already well within SAML2's 
purview already, as noted.

Scenarios 2 and 3 are a little more confusing.  They involve 
different levels of delegation of authority, which is famous for 
having "nontechnical" components that are extremely difficult to get 
right.  My initial thought was that they could perhaps benefit from 
the fact that Liberty Web Services already handles what could be 
called "delegation of access", wherein you authorize access of 
others to your own attribute services.  But at the end of the day I 
just wasn't sure how to read these scenarios, and was mostly 
interested in hearing more.

	Eve

Prateek Mishra wrote:
> Input from the European GUIDE project for review and comment by the TC.
> 
> -------- Original Message --------
> Subject:     FW: OASIS vs GUIDE
> Date:     Mon, 14 Aug 2006 13:52:39 +0200
> From:     Pim van der Eijk <pim.vandereijk@oasis-open.org>
> To:     <prateek.mishra@oracle.com>, <hlockhar@bea.com>
> 
> 
> 
> Hello Prateek and Hal,
> 
> Some time ago I contacted you about a GUIDE, a project on Identity 
> Management for eGovernment.
> I asked some key people (at BT) to write up a proposal of what they 
> would like to contribute to the TC and what they would like to have 
> feedback on, and they have sent me the attached document.
> Would you like them to send this to the TC and discuss it in an upcoming 
> TC conference call, or does it make sense to have a separate discussion 
> with a smaller group first?
> Please let me know what you think ..
> 
> Pim
> 
> ------------------------------------------------------------------------
> *From:* gerrit.ros@bt.com [mailto:gerrit.ros@bt.com]
> *Sent:* 11 August 2006 16:46
> *To:* pim.vandereijk@oasis-open.org
> *Cc:* martyn.bowes@bt.com; colin.young@bt.com; marc.greaves@bt.com
> *Subject:* OASIS vs GUIDE
> *Importance:* High
> 
> Hi Pim,
> 
> Attached you will find the promised A4 regarding the cooperation between 
> GUIDE (BT) and OASIS. Let me know if this document covered the topics 
> you expected. I would like to receive your feedback as soon as possible. 
> Would it be a good suggestion to introduce Martyn/Colin to the OASIS 
> community?
> 
> If you have additional questions remarks let me know by phone or email.
> 
> I spoke again with my colleagues regarding the OASIS event in London. We 
> will respond at short notice.
> 
> Best regards,
-- 
Eve Maler                                         +1 425 947 4522
Technology Director                           eve.maler @ sun.com
CTO Business Alliances group                Sun Microsystems, Inc.