IdP vs OP (WAS: RE: "Editors" Conference Call)

Dick Hardt dick at sxip.com
Tue Nov 7 18:23:39 UTC 2006


On 7-Nov-06, at 8:17 AM, John Kemp wrote:

> Dick Hardt wrote:
>>
>> On 7-Nov-06, at 7:59 AM, John Kemp wrote:
>>>
>>> I don't believe that trust is a differentiator between SAML
>>> specifications and OpenID Authentication specifications.
>>>
>>> It is AFAICT, in both cases, simply out of scope.
>>
>> I should have been more clear, IdP is a Federation term and implies
>> trust between the IdP and the RP.
>> That is the definition that many people have about an IdP
>> Since trust is NOT required between an OP and an RP in OpenID, a
>> different term helps clarify that important point
>
> I'll quit repeating myself after this go around, but:
>
> "It [trust] is AFAICT, in both cases, simply out of scope."

Trust is not out of scope for Federation. I am contrasting OpenID  
with Federation.





More information about the specs mailing list