← Prev in month ← Prev in thread

Question about affiliationOwnerID

From
Hideki YOKOTA <>
Date
2007-05-22T05:57:46+00:00
ID
Thread
Question about affiliationOwnerID
Hello,

I'm trying to clarify SSO sequence and  contents of <AuthnRequest>
that use Affiliation.
To begin with Metadata, should I set same value to affiliationOwnerID
of <AffiliationDescriptor> with entityID of <EntityDescriptor> ?

For example, when "http://ServiceProvider.com" is a member of
affiliation "http://AffiliationA.com", is following metadata correct?

<md:EntityDescriptor entityID="http://AffiliationA.com"
        validUntil="..." xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <!-- QUESTION 1: Is entityID same as affiliationOwnerID? -->
    <md:AffiliationDescriptor affiliationOwnerID="http://AffiliationA.com">
        <md:AffiliateMember>http://ServiceProvider.com</md:AffiliateMember>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo
xmlns:ds="http://www.w3.org/2000/09/xmldsig#">...</md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo
xmlns:ds="http://www.w3.org/2000/09/xmldsig#">...</md:KeyDescriptor>
   </md:AffiliationDescriptor>
</md:EntityDescriptor>

Thanks,

-- 
Hideki
← Prev in month ← Prev in thread