Difference between revisions of "Entity Statement"
From MgmtWiki
(→Solutions) |
(→Solutions) |
||
| Line 23: | Line 23: | ||
| jwks || || || A JSON Web Key Set (JWKS) representing the public part of the subject entity's signing keys | | jwks || || || A JSON Web Key Set (JWKS) representing the public part of the subject entity's signing keys | ||
|- | |- | ||
| − | | | + | | authority_hints|| || ||entities that may issue an entity statement about the issuer entity |
|- | |- | ||
| − | | | + | | metadata || || || |
|- | |- | ||
|[[SAML 2.0]]||AuthN ||SAML2||OASIS-open.org original single sign on standard | |[[SAML 2.0]]||AuthN ||SAML2||OASIS-open.org original single sign on standard | ||
Revision as of 22:38, 21 June 2019
Full Title or Meme
A digital document that describes a digital Entity typically signed by a trusted issuer.
Context
On the Identity Management page different roles are defined for Entities.
Problems
Solutions
Quite a few structures have been defined to describe entities. The Entity Statement created in the OpenID Connect Federation document is taken as be base for comparison with several others in the table below.
| Entity Statement | X.509 certificate | DID Document | Notes |
| iss | The entity identifier of the issuer of the statement. | ||
| sub | The entity identifier of the subject | ||
| iat | The time the statement was issued. | ||
| exp | Expiration time on or after which the statement MUST NOT be accepted for processing. | ||
| jwks | A JSON Web Key Set (JWKS) representing the public part of the subject entity's signing keys | ||
| authority_hints | entities that may issue an entity statement about the issuer entity | ||
| metadata | |||
| SAML 2.0 | AuthN | SAML2 | OASIS-open.org original single sign on standard |
| TSCP | Transglobal Secure Collaboration Participation is a collaborative forum of worldwide stakeholders in the defense industry to address security issues | ||
| W3C Credential Community Group | Decentralized | eg Public Ledger | DID, verifiable claims sponsored by blockchain providers |
| Web AuthN | IAP or RP | aka FID02 | released under W3C |
| Univ. of MD | Closed | IDEF registered, supports Internet2 SAML federation |
