as '[e-mail]' Verify it is Lisa. Authenticat

1
(No Transcript)
2
Generalized network architecture
Relying Party
IdentityProvider
Client
3
Use case Browser
Lisas BlogHost
Verify it is Lisa
Alices Blog
Leave commentas Lisa_at_blog.example.com
Authenticate and allow identification
Browser
4
Use case App
Alices CalendarServer
Lisas IdentityProvider
Verify it is Lisa
View calendaras Lisa_at_example.com
Authenticate and allow identification
CalendarApp
5
DIX WG Charter
HomeSite
SAML?
MemberSite
Who suggestsDIX? What interchanges?
Any requirements on this side?
Agent
6
DIX Proposal(draft-merrells-dix-00 alias dmd1)
HomeSite
MemberWeb site
S2S viabrowser
HTML Formconventions
Not Specified
Browser
7
Probable BOF Concerns

• Phishing
• Re-use of technologies (e.g. SAML)
• Appropriateness of HTML Form use
• Scope
• Usefulness