OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

saml-dev message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: Question about affiliationOwnerID


Hello,

I'm trying to clarify SSO sequence and  contents of <AuthnRequest>
that use Affiliation.
To begin with Metadata, should I set same value to affiliationOwnerID
of <AffiliationDescriptor> with entityID of <EntityDescriptor> ?

For example, when "http://ServiceProvider.com"; is a member of
affiliation "http://AffiliationA.com";, is following metadata correct?

<md:EntityDescriptor entityID="http://AffiliationA.com";
        validUntil="..." xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <!-- QUESTION 1: Is entityID same as affiliationOwnerID? -->
    <md:AffiliationDescriptor affiliationOwnerID="http://AffiliationA.com";>
        <md:AffiliateMember>http://ServiceProvider.com</md:AffiliateMember>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo
xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>...</md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo
xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>...</md:KeyDescriptor>
   </md:AffiliationDescriptor>
</md:EntityDescriptor>

Thanks,

-- 
Hideki


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]