Re: [wsrp-wsia] [I#104] Proposed resolution: WSRP recommends thatportals not do user-mapping

[Rex Brooks <rexb@starbourne.com>]

Good step in the correct (IMHO), and likeliest, direction.

Rex

At 1:43 PM +0200 10/27/02, Gil Tayar wrote:
>Issue:  104
>Title:  WSRP recommends that portals not do user-mapping
>Resolution Date: 10-Nov-2002
>Status: Tentative resolve
>Proposed Resolution: The language was changed in v0.8 to recognize
>Consumers may supply user information in a variety of means, but that the
>entity ultimately has to be ready to request this information directly from
>the End-User. Current language:
>
>   "It  is  anticipated  that  some  entities will interact with one or more
>   back-end  applications  that require a user identity for the End-User. If
>   the user identity required by the back-end application is not the same as
>   that  authenticated  or  otherwise  supplied  by the Consumer, the entity
>   SHOULD   require  the  End-User  to  provide  the  necessary  information
>   (preferably using secure transport) for use with the back-end application
>   via  markup  interactions  (e.g.  display  a form that prompts for a user
>   identity  and  any  security tokens (such as a password) for the back-end
>   system)."
>
>----------------------------------------------------------------
>To subscribe or unsubscribe from this elist use the subscription
>manager: <http://lists.oasis-open.org/ob/adm.pl>


-- 
Rex Brooks
Starbourne Communications Design
1361-A Addison, Berkeley, CA 94702 *510-849-2309
http://www.starbourne.com * rexb@starbourne.com