OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

wsrp-wsia message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]


Subject: [wsrp-wsia] [I#104] WSRP recommends that portals not do user-mapping


Topic:  user info
Class:  Editorial
Title:  WSRP recommends that portals not do user-mapping
Document Section: 10.2
Description:
The spec says "If user identity known by the back-end application is not the
same as that authenticated by the Consumer, the entity SHOULD require the
End-User to provide the necessary information...".
This seems to make vendor extensions to WSRP that allow the consumer to
handle user-mapping and transfer the needed credentials to the producer
unrecommended. There is no reason for this, and some portals, including
SAP's, currently have this feature. The SHOULD should be replaced with CAN,
perhaps also mentioning the possibility of vendor extension.


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]


Powered by eList eXpress LLC