Issue 52: Add single request for multiple tokens to WS-Trust

["Marc Goodner" <mgoodner@microsoft.com>]

Logged as issue 52.

Marc Goodner
Technical Diplomat
Microsoft Corporation
Tel: (425) 703-1903
Blog: http://spaces.msn.com/mrgoodner/ 


-----Original Message-----
From: Frederick Hirsch [mailto:frederick.hirsch@nokia.com] 
Sent: Thursday, March 30, 2006 8:01 PM
To: ws-sx@lists.oasis-open.org
Cc: Hirsch Frederick; Marc Goodner
Subject: New Issue: Add single request for multiple tokens to WS-Trust

PLEASE DO NOT REPLY TO THIS EMAIL OR START A DISCUSSION THREAD UNTIL  
THE ISSUE IS ASSIGNED A NUMBER.
The issues coordinators will notify the list when that has occurred.

Protocol:  ws-trust

Artifact:  spec

Type: design

Title: Add single request for multiple tokens

Description:

There are occasions where efficiency is important. Reducing the  
number of messages in a message exchange pattern can greatly improve  
efficiency. One way to do this in the context of WS-Trust is to avoid  
repeated round-trips for multiple related token requests. An example  
is requesting an identity token as well as tokens that offer other  
claims in a single operation.

Related issues: none

Proposed Resolution:

Add a new Request element, RequestMultipleSecurityTokens, which  
allows the request of multiple tokens in a single request.  The  
existing RequestSecurityTokenResponseCollection allows multiple  
RequestSecurityTokenResponse elements to be contained in a single  
response and can be used to convey the reply to a  
RequestMultipleSecurityTokens request.

This proposal includes processing rules to keep the implementation  
simple and pragmatic, which is essential.

Suggested detailed proposal is attached in both Word and PDF format.

regards, Frederick

Frederick Hirsch
Nokia