Difference between revisions of "Entity Statement"
From MgmtWiki
(→Solutions) |
(→Solutions) |
||
| Line 27: | Line 27: | ||
| metadata || || || | | metadata || || || | ||
|- | |- | ||
| − | | | + | | metadata_policy||AuthN ||SAML2||OASIS-open.org original single sign on standard |
|- | |- | ||
| − | | | + | | sub_is_leaf|| || ||is the subject considered a leaf entity |
|- | |- | ||
| − | | | + | | ||Decentralized||eg Public Ledger || |
|- | |- | ||
| − | |Web AuthN ||IAP or RP ||aka FID02 || | + | |Web AuthN ||IAP or RP ||aka FID02 || |
|- | |- | ||
| − | | | + | | || ||Closed || |
|} | |} | ||
Revision as of 22:47, 21 June 2019
Full Title or Meme
A digital document that describes a digital Entity typically signed by a trusted issuer.
Context
On the Identity Management page different roles are defined for Entities.
Problems
Solutions
Quite a few structures have been defined to describe entities. The Entity Statement created in the OpenID Connect Federation document is taken as be base for comparison with several others in the table below.
| Entity Statement | X.509 certificate | DID Document | Notes |
| iss | The entity identifier of the issuer of the statement. | ||
| sub | The entity identifier of the subject | ||
| iat | The time the statement was issued. | ||
| exp | Expiration time on or after which the statement MUST NOT be accepted for processing. | ||
| jwks | A JSON Web Key Set (JWKS) representing the public part of the subject entity's signing keys | ||
| authority_hints | entities that may issue an entity statement about the issuer entity | ||
| metadata | |||
| metadata_policy | AuthN | SAML2 | OASIS-open.org original single sign on standard |
| sub_is_leaf | is the subject considered a leaf entity | ||
| Decentralized | eg Public Ledger | ||
| Web AuthN | IAP or RP | aka FID02 | |
| Closed |
