Re: [ws-sx] WS SX Additional Interop Scenarios

[Anthony Nadalin <drsecure@us.ibm.com>]

1. "Requestor obtains SAML 1.1 Bearer Token from STS"
a. The SAML token is signed by the STS - is this the actual SAML token being signed or the header with the token ?
2. " Requestor obtains SAML 1.1 HoK Over Bilateral HTTPS"
a. This seems to involve some WS stack changes, and I'm not sure how we indicate that this is what is being requested by the WS stack
3. "Requestor obtains SAML 2.0 Bearer Token from STS OnBehalfOf User"
a. I think that this would just fall into a OnBehalfOfUser" case and not specific to SAML 2.0 Bearer Token
4. "Requestor obtains SAML 2.0 HoK Assertion OnBehalfOf User Over Bilateral HTTPS"
a. same issues as #2 and #3

Anthony Nadalin | Work 512.838.0085 | Cell 512.289.4122
Prateek Mishra <prateek.mishra@oracle.com>

Prateek Mishra <prateek.mishra@oracle.com>

03/21/2006 11:44 AM

To	ws-sx@lists.oasis-open.org
cc	Greg Whitehead <greg.whitehead@hp.com>, Scott Cantor <cantor.2@osu.edu>, ramana Turlapati <ramana.turlapati@oracle.com>, John.Hughes@paconsulting.com
Subject	[ws-sx] WS SX Additional Interop Scenarios

I have attached a document describing some additional WS-Trust,
WS-SecureConversation interop scenarios.

The scenarios are still an outline and I need your help to fill in the
details.

They are as follows:

(1) Issue SAML Bearer Assertion (SAML 1.1/SAML 2.0) using WS-Trust STS;
RST message protected by UserNameToken
(2) Issue SAML HoK Assertion (SAML 1.1/SAML 2.0) bound to X.509v3
Client-Certificate using WS-Trust STS; RST message protected by
bilateral SSL.
(3) Issue SAML HoK Assertion (SAML 2.0) bound to SCT using WS-Trust and
WS-SecureConversation.

- prateek


[attachment "wx-sx-additional-interop-00.doc" deleted by Anthony Nadalin/Austin/IBM]