[security-services] Submission of of draft-sstc-ws-sec-profile-03 toWSS TC

WSS TC 
Co-Chairs:

 

I am submitting the 
attached draft describing a WS-Security profile for SAML 1.0 for 
consideration within the WSS TC agenda and deliverables. The draft describe 
the use of WS-Security elements for carrying SAML assertions within SOAP 
messages. I propose that this subject be developed further 
and be taken forward as a deliverable within the WSS TC.

 

The SAML 1.0 Specification Set is at 
Commitee Specification maturity level and has undergone an editorial 
revision; as of 31 May 2002 the specifications are at revision 01. They 
will enter a balloting period in pursuit of OASIS Standard status on 1 June 
2002. The specifications may be obtained from http://www.oasis-open.org/committees/security/#documents.

 

Implementations of SAML are 
available from many sources including http://www.opensaml.org and http://www.phaos.com. A Java API standardization 
effort is underway at http://www.jcp.org/jsr/detail/155.jsp with 
completion expected in 2002.

 

Commercial products with 
support for SAML are available today from Baltimore and Entegrity. Forthcoming 
products with support for SAML have been announced by Netegrity, Tivoli, Oblix, 
SUN, Quadrasis, CrossLogix, RSA, ePeople and other vendors.

 

 

 

Attachment:
draft-sstc-ws-sec-profile-03.doc

Description: MS-Word document