Difference between revisions of "Entity Statement"
From MgmtWiki
(→Solutions) |
(→Solutions) |
||
| Line 21: | Line 21: | ||
| exp || || || Expiration time on or after which the statement MUST NOT be accepted for processing. | | exp || || || Expiration time on or after which the statement MUST NOT be accepted for processing. | ||
|- | |- | ||
| − | | jwks || || || A JSON Web Key Set (JWKS) | + | | jwks || || || A JSON Web Key Set (JWKS) of the public part of the subject entity's signing keys |
|- | |- | ||
| authority_hints|| || ||entities that may issue an entity statement about the issuer entity | | authority_hints|| || ||entities that may issue an entity statement about the issuer entity | ||
| Line 27: | Line 27: | ||
| metadata || || || protocol specific metadata claims | | metadata || || || protocol specific metadata claims | ||
|- | |- | ||
| − | | metadata_policy|| ||||type followed by organization information | + | | metadata_policy|| || ||type followed by organization information |
|- | |- | ||
| sub_is_leaf|| || ||is the subject considered a leaf entity | | sub_is_leaf|| || ||is the subject considered a leaf entity | ||
Revision as of 23:01, 21 June 2019
Full Title or Meme
A digital document that describes a digital Entity typically signed by a trusted issuer.
Context
On the Identity Management page different roles are defined for Entities.
Problems
Solutions
Quite a few structures have been defined to describe entities. The Entity Statement created in the OpenID Connect Federation document is taken as be base for comparison with several others in the table below.
| Entity Statement | X.509 certificate | DID Document | Notes |
| iss | The entity identifier of the issuer of the statement. | ||
| sub | The entity identifier of the subject | ||
| iat | The time the statement was issued. | ||
| exp | Expiration time on or after which the statement MUST NOT be accepted for processing. | ||
| jwks | A JSON Web Key Set (JWKS) of the public part of the subject entity's signing keys | ||
| authority_hints | entities that may issue an entity statement about the issuer entity | ||
| metadata | protocol specific metadata claims | ||
| metadata_policy | type followed by organization information | ||
| sub_is_leaf | is the subject considered a leaf entity | ||
