Tony
I
don't see any definition of impersonation in the SAML Glossary. But more
to the point, the reason I asked Ron to include a definition of impersonation
was that at the time he and Rich Levinson were defining a protocol in the
SAML profile, which used impersonation . This I felt would lead users to
assume that using the impersonation capability would be equivalent to
using delegation, since the difference between the two is subtle to the
uninitiated. In fact, the two are quite different in that in
delegation the delegator should be able to say who can act as delegatees
for him and to limit what activities the delegatees can perform in the
delegator's name. Impersonation says that anyone can do anything in the
name of the impersonated entity. However, since this addition to the
specification is not being incorporated, I withdraw my
request.
Don
-----Original Message-----
From: Anthony Nadalin
[mailto:]
Sent: Tuesday, March 09, 2004 4:56
PM
To: ''
Subject: Re: [wss]
proposed terminology addition to STP - impersonation
Can't you just put a reference to the SAML Glossary in the appendix and
thus not define duplicate terms ?
Anthony Nadalin | work 512.838.0085 |
cell 512.289.4122
"
src="gif00020.gif" width=16>Ron Monzillo
<>
Ron Monzillo
<>
03/09/2004 09:15 AM
To
"''"
<>
cc
Subject
[wss] proposed terminology addition to STP -
impersonation
Donn
Flinn asked that a definition of impersonation be added to the
terminology
section of the SAML token profile.
I propose that the following line be
added (at about line 183).
Impersonation – occurs when the attesting
entity is not the subject of
the assertions.
where attesting entity
is already defined as:
175 Attesting Entity – the entity that provides
the confirmation
evidence that will be
used to establish the
correspondence between the subject of SAML subject
statements (in SAML
assertions) and SOAP message content.
To unsubscribe from this
mailing list (and be removed from the roster of the OASIS TC), go to
http://www.oasis-open.org/apps/org/workgroup/wss/members/leave_workgroup.php.
