RE: [provision] DU0002 RA - PSP Create Accounts

[Tony Gullotta <TGullotta@access360.com>]

I concur with Darran with one change and one addition.

 

1. I don't believe step "e" below is needd unless we're implying the PSP is going to resend the status to the RA if the RA does not acknowledge the previous message within a time threshold.

 

2. It appears as though this use case has implied prior trust being established between the RA and the PSP. Is this sufficient for this first phase, or should we address a less trusting model? I'm thinking about something that requires some sort of certificate of authenticity is needed to ensure the identity information being passed is accurate. This could be the RA's certification if trust has been pre-established, or a third party if not. This would most likely be something that SAML could help out with.

 

Tony

-----Original Message-----
From: Darran Rolls [mailto:Darran.Rolls@waveset.com]
Sent: Tuesday, April 02, 2002 4:53 AM
To: provision@lists.oasis-open.org
Subject: RE: [provision] DU0002 RA - PSP Create Accounts

I have the following comments on DU0002:

 

1.     My interpretation of this UC is that it describes the request for the creation of a new vID.  Based on this assumption, is the organization simply one of the attributes required to create a new vID?  If so maybe we should make the description explain this

2.     On l-56, I don’t understand why the connection information is needed?

3.     On l-69, I think we should not use the word bind

4.     Based on 1 (above), shouldn’t step on l-69 through 76 simply read:

a.     RA sends “create vID” request to PSP specifying the required vID and required vID attributes

b.     PSP responds with RequestID

c.     PSP creates new vID

d.     PSP sends status message to RA of operation success or failure

e.     RA sends message receipt to PSP

5.     We may want to annotate outside the steps that a PSP may choose to implement the creation of downstream PST entries based on the information in receives for the vID (as you imply in the steps) – this being a simple implementation of a PSP-PST create request

6.     Post conditions on l-78 should read “A vID has been added to the PSP

 

 

 

Darran Rolls  
MSIM  drolls_waveset@hotmail.com
AIM    drollswaveset
YIM    drolls_waveset
http://www.waveset.com/
drolls@waveset.com

 

-----Original Message-----
From: Darran Rolls
Sent: Monday, March 25, 2002 11:25 PM
To: provision@lists.oasis-open.org
Subject: [provision] DU0002 RA - PSP Create Accounts

 

http://lists.oasis-open.org/archives/provision/200203/msg00009.html

 

Darran Rolls  
MSIM  drolls_waveset@hotmail.com
AIM    drollswaveset
YIM    drolls_waveset
http://www.waveset.com/
drolls@waveset.com