1 / 4

SAML Attribute Format in AAA SAML Binding: IETF Draft Update

This draft from IETF proposes changes in the AAA SAML binding, dropping the CT field and registry while updating the attribute format to accommodate SAML messages split over multiple attributes. The document addresses alignment with the AAA SAML binding and Diameter work, emphasizing the need for proper alignment and consideration of PLASMA.

semah
Télécharger la présentation

SAML Attribute Format in AAA SAML Binding: IETF Draft Update

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. A RADIUS Attribute for SAML Messages draft-ietf-abfab-aaa-saml-01 ABFAB, IETF 80

  2. Changes since 00 • CT field dropped • CT registry dropped

  3. Attribute format 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type | Length | SAML Message... +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Type: TBD Length: >=4 Message: The Message field is one or more octets containing a SAML message. If larger than a single attribute, the SAML message data MUST be split on 253-octet boundaries over as many attributes as necessary. The SAML message is reconstructed by concatenating the contents of all SAML-Message attributes.

  4. Pending • Check that PLASMA are okay. • Decide what alignment is necessary with the AAA SAML binding and the Diameter work, and update accordingly.

More Related