xspa-interop-tech — archive

[Craig Forster]

Hi all, My understanding of the previous XSPA interop events is that it has been mostly XACML-focused, with a VA-provided application calling out to the various vendor's PDPs to render an authorization decision. Will we be following a similar model for the demonstration of WS-Trust? Referring to Figure 1 of the XSPA WS-Trust profile (p. 8) The scenario I envisage is that the "Service User" will call out to various vendors' WS-Trust endpoints to obtain a SAML assertion used to call the "Service Provider". The implication of this is that the interop will have a pre-defined set of user accounts and associated XSPA attributes that each vendor should use to populate the contents of the SAML assertion. Does this sound right, or am I way off the mark? Also, will there be vendor-provided WS-Trust interactions on the Service Provider side in which the received SAML assertion is validated and potentially authorized? Regards, Craig --- craig forster | staff software engineer | ibm australia development labs