Gap Analysis minutes 2011-08-25

We will now address use case by use case rather than taking each standard in turn

Starting with #27, Intercloud Document Exchange

Discussed distinction between Federated Identity operations and Provisioning

Provisioning is CRUD operations on top of directories

Federated Identity has a notion of a trusted identity providers

Scenarios 1 and 3 relate to identity setup, and the associated attributes

SAML, SPML, WS-Trust (with claims that could be SAML tokens), OpenId, Oauth

Discussed scenario 2, re authorization to submit documents

In identity terms, this depends on establishing/validating a match between a pre-existing identity in the receiver system, and a newly-provisioned identity triggered by the sender system, based on the matching of certain attributes associated with each of those two identities.

Matt proprosed to come up with a design for such a system, for discussion next time.

id-cloud message