RE: Two scenarios

["Edwards, Nigel" <Nigel_Edwards@hp.com>]

Hal Lockhart has pointed out that I have incorrectly used the
terms Policy Decision Point and Policy Enforcement Point in
the two scenarios I posted to the list earlier.

An attribute authority is not a Policy Decision Point.
The entity evaluating the assertions to make an authorization
decision is not a Policy Enforcement Point.

Hopefully the two scenarios still make some sense.

I look forward to a document defining our terminology ;-)

Nigel.