RE: [security-services] Proposed clean up on subject text

[Paul Madsen <p.madsen@entrust.com>]

Scott, the sequencing of 'the name identifier and associated with the claims
in the assertion' 

could be interpreted as 

"the relying party can treat the entity presenting the assertion as an
entity that the SAML authority has associated with the entity 
identified in the name identifier and **also** associated with the claims in
the 
assertion. The confirming entity and the actual subject may or may not be
the 
same entity.

But I believe the intended semantic is 

"the relying party can treat the entity presenting the assertion as an
entity that the SAML authority has associated with the entity 
identified in the name identifier (that entity associated with the claims in
the 
assertion). The confirming entity and the actual subject may or may not be
the 
same entity.

Paul


>-----Original Message-----
>From: Scott Cantor [mailto:cantor.2@osu.edu]
>Sent: Friday, November 12, 2004 12:50 PM
>To: 'Philpott, Robert'
>Cc: 'SAML'
>Subject: RE: [security-services] Proposed clean up on subject text
>
>
>> [RSP] four uses of the word "entity" makes this a bit confusing,
>> especially since the referenced entities are not always 
>> referring to the same entity.
>
>Yeah...How about pulling the parenthetical up:
>
>"the relying party can treat the entity presenting the assertion as an
>entity that the SAML authority has associated with the entity 
>identified in
>the name identifier and associated with the claims in the 
>assertion. The
>confirming entity and the actual subject may or may not be the 
>same entity."
>
>-- Scott
>
>
>To unsubscribe from this mailing list (and be removed from the 
>roster of the OASIS TC), go to 
>http://www.oasis-open.org/apps/org/workgroup/security-services/
members/leave_workgroup.php.