Groups - SAML shared credential (draft-saml-shared-credential-discussion-01.doc) uploaded

[ashish.patel@rd.francetelecom.com]

The submitted shared credential document is an outcome of joint discussion
between NTT and France Telecom regarding common set of requirements and
potential solutions. 

The purpose of the submission is to discuss the possible solutions among
SAML TC members and conclude an approach by leveraging any relevant work
done in past such as Extensions draft submitted by Scott Cantor [1].   

The document explores the solutions for a use case where a user gets
authenticated based on a credential which does not uniquely identify the
user (phone at home, PPPoE connection etc.) and IDP is unable to assert
anything beyond the fact that the user was one of the set of individuals
that shared that credential. An SP may deem such an assertion as
insufficient for enabling access to resources associated with a particular
individual identity and so may request from the IDP an assertion
characterized by a credential unique to that individual.

[1]
http://www.oasis-open.org/apps/org/workgroup/security/download.php/15207/draft-saml-protocol-ext-01.pdf

-
Ashish Patel
France Telecom


 -- Mr Ashish Patel

The document named SAML shared credential
(draft-saml-shared-credential-discussion-01.doc) has been submitted by Mr
Ashish Patel to the OASIS Security Services (SAML) TC document repository.

Document Description:
This document explores the shared credential use case and proposes a 
extension that would allow a SP to manage authentications distinguished by
whether or not the authentication credential is shared or not. 

View Document Details:
http://www.oasis-open.org/apps/org/workgroup/security/document.php?document_id=16297

Download Document:  
http://www.oasis-open.org/apps/org/workgroup/security/download.php/16297/draft-saml-shared-credential-discussion-01.doc


PLEASE NOTE:  If the above links do not work for you, your email application
may be breaking the link into two pieces.  You may be able to copy and paste
the entire link address into the address field of your web browser.

-OASIS Open Administration