Re: Federated Authorization

2007-01-25 Thread Dick Hardt
Hi James In the examples I was wanting to demonstrate that the Hospital would not issue a claim that the surgeon is part of the team unless the Hospital was presented with a valid claim from the College of physicians and surgeons that the surgeon is still a surgeon. In your example are y

RE: Federated Authorization

2007-01-25 Thread McGovern, James F \(HTSC, IT\)
correlated. -Original Message- From: Dick Hardt [mailto:[EMAIL PROTECTED] Sent: Thursday, January 25, 2007 4:43 PM To: McGovern, James F (HTSC, IT) Cc: specs@openid.net Subject: Re: Federated Authorization On 25-Jan-07, at 1:36 PM, McGovern, James F ((HTSC, IT)) wrote: Modify your scenario

Re: Federated Authorization

2007-01-25 Thread Dick Hardt
On 25-Jan-07, at 1:36 PM, McGovern, James F ((HTSC, IT)) wrote: Modify your scenario as follows: - Tthe College of Physicians and Surgeons says she is a surgeon and is board certified for X number of procedures - A particular hospital says she is part of their team. Likewise, they also kno

RE: Federated Authorization

2007-01-25 Thread McGovern, James F \(HTSC, IT\)
Hopefully we can develop specifications which go deeper than just matching/correlation of identity and attribute. -Original Message- From: Dick Hardt [mailto:[EMAIL PROTECTED] Sent: Thursday, January 18, 2007 7:16 PM To: McGovern, James F (HTSC, IT) Cc: specs@openid.net Subject: Re: Federated

Re: Federated Authorization

2007-01-18 Thread Dick Hardt
Hi James As Phillip states, SAML can be used to represent the assertion. Interesting that you mention a Doctor example. A use case that we are working on uses a Surgeon (Sally) who needs to prove: - Tthe College of Physicians and Surgeons says she is a surgeon - A particular hospital says sh

RE: Federated Authorization

2007-01-18 Thread Hallam-Baker, Phillip
The SAML specification is designed to target this precise set of requirements, it has widespread support amongst vendors who support enterprise class products. If you want to have a third party accreditation of a statement such as 'Dr Cripps is a licensed medical practitioner' it is going to be