Re: [plasma] URL of identity provider in plasma response

"Jim Schaad" <jimsch@nwlink.com> Thu, 05 July 2012 17:33 UTC

From: Jim Schaad <jimsch@nwlink.com>
To: 'Alan Borland' <alan.b.borland@googlemail.com>, plasma@ietf.org
References: <CALtitoZ=VJ0386VN1S3NJ6+aO8QQnabzGZzNG1SwP0352FeqXA@mail.gmail.com>
In-Reply-To: <CALtitoZ=VJ0386VN1S3NJ6+aO8QQnabzGZzNG1SwP0352FeqXA@mail.gmail.com>
Date: Thu, 05 Jul 2012 10:32:28 -0700
Message-ID: <045101cd5ad4$26d3e540$747bafc0$@nwlink.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_0452_01CD5A99.7A8C17B0"
Thread-Index: AQG2A3opt7WzVRjrdfb0MMYs9XyRW5dJoQqQ
Content-Language: en-us
Subject: Re: [plasma] URL of identity provider in plasma response
Precedence: list

That is an interesting idea, and one that we should look at.  I was not at
the meeting in Reston.  Currently it will return the set of attributes that
are required to the requestor, but not a set of attribute authorities. 

 

jim

 

From: plasma-bounces@ietf.org [mailto:plasma-bounces@ietf.org] On Behalf Of
Alan Borland
Sent: Thursday, July 05, 2012 3:09 AM
To: plasma@ietf.org
Subject: [plasma] URL of identity provider in plasma response

 

(resend)

 

At our meeting in Reston I thought it was described how a client could send
a Plasma Request without an Authentication element.  In this case the Plasma
Server would return a Plasma Response to the client containing the URL of
the Identity Provider (adfs) to authenticate with.  The client must then
authenticate with the Identity Provider and re-submit the Plasma Request
with the completed Authentication element (including the assertion returned
by adfs)  However, I can't find any of this described in the draft RFCs - Is
this yet to be described or have I misunderstood something?

 

Alan.

[plasma] URL of identity provider in plasma respo… Alan Borland
Re: [plasma] URL of identity provider in plasma r… Jim Schaad