RE: [provision] WS-Security, SAML, SPML Interop...

["Darran Rolls" <Darran.Rolls@waveset.com>]

Interesting....  How would the common RA “derive” a new assertion for each user and how would that assertion be related back to the “end user” that requested the account such that they could go and “see it at another PSP”?

 

=========================================================

Darran Rolls                      http://www.waveset.com

Waveset Technologies Inc          drolls@waveset.com

512) 657 8360                    

=========================================================

 

-----Original Message-----
From: Jeff Bohren [mailto:jbohren@opennetwork.com]
Sent: Monday, May 05, 2003 11:12 AM
To: provision@lists.oasis-open.org
Subject: [provision] WS-Security, SAML, SPML Interop...

 

 

Continuing this thread on the list, I wanted to suggest a good way to integrate SAML into the SPML Interop. We have a SAML Subject Assertion based identifier type. If we had a common RA use the identifier type for all requests then that would show SAML usage in SPML, but in the scope of the work we have done in the specification.

 

Jeff Bohren

Product Architect

OpenNetwork Technologies, Inc