Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Name

Relevant actor or component

in SAML federation model

Relevant actor or component

in UMA model

Request AuthenticationEnd User AResource Owner
AuthenticateAuthentication Service fronting SAML IdPAuthentication Service fronting Resource Server
Request Authorization to edit White Page (WP) InformationEnd User ARequesting Party A
Grant Authorization to edit WP InformationPortal Tab App behind SAML SPAuthorization Server
Edit WP InformationEnd User AResource Owner
Set Access Policy for WP InformationEnd User AResource Owner
Persist Access Policy for WP InformationNot SAML SpecifiedAuthorization Server
Put WP Information OnlinePortal TabResource Server
Find Person WP InformationEnd User BRequesting Party B
Request Authorization for WP Information AccessEnd User BRequesting Party B
Grant Authorization for WP Information AccessPortal Tab App behind SAML SPAuthorization Server
Show WP InformationPortal Tab AppResource Server or Client

This simple example already highlights some differences between a SAML-based solution and an UMA-based solution. Note that functions performed by the Portal Tab App are carried out by more than one component in the UMA model.  This helps explain the need for a protocol for cooperatively provided services in the UMA model–The Resource Server and Authorization Server need to collaborate to accomplish the usage scenario.  Conversely the comparison highlights that elements of the usage scenario are "out of band" with respect to the SAML model. A full solution would have to be "SAML plus".