RE: Two scenarios

Hal Lockhart has pointed out that I have incorrectly used the
terms Policy Decision Point and Policy Enforcement Point in
the two scenarios I posted to the list earlier.

An attribute authority is not a Policy Decision Point.
The entity evaluating the assertions to make an authorization
decision is not a Policy Enforcement Point.

Hopefully the two scenarios still make some sense.

I look forward to a document defining our terminology ;-)

Nigel.