diff --git a/openid-federation-1_0.xml b/openid-federation-1_0.xml index 5a885ee..25071a9 100644 --- a/openid-federation-1_0.xml +++ b/openid-federation-1_0.xml @@ -2195,7 +2195,7 @@ A Trust Chain with Entity metadata that does not comply with - the resolved metadata policies is deemed invalid. + the Resolved Metadata policies is deemed invalid. @@ -3161,7 +3161,7 @@ contains a metadata Claim, this MUST first be applied, as described in the Claim definition in , and only then it can be - proceeded with applying the resolved metadata policy. + proceeded with applying the Resolved Metadata policy. @@ -3382,10 +3382,10 @@ Intermediate Entity for its Immediate Subordinates are applied to the Trust Chain subject metadata. After that, the merged metadata policy is applied, to produce the - following resulting resolved RP metadata: + following resulting RP Resolved Metadata: - The Resulting Resolved RP Metadata for the Trust Chain Subject + The Resulting RP Resolved Metadata for the Trust Chain Subject - REQUIRED. JSON object containing the resolved subject metadata, + REQUIRED. JSON object containing the subject's Resolved Metadata, according to the requested type and expressed in the metadata format defined in . @@ -7008,7 +7008,7 @@ HTTP/1.1 302 Found The RP SHOULD select its metadata parameters to comply with - the resolved OP metadata and thus ensure a successful + the OP's Resolved Metadata and thus ensure a successful registration with the OP. Note that if the submitted RP metadata is not compliant with the metadata of the OP, the OP may choose to modify it to make it compliant @@ -7447,7 +7447,7 @@ HTTP/1.1 302 Found The RP MUST first ensure that the information it was registered with - at the OP contains the same set of entity_types as the request does. + at the OP contains the same set of Entity Types as the request does. After having collected a Trust Chain using the response Claim trust_anchor as the Entity Identifier for the Trust Anchor and @@ -8053,7 +8053,7 @@ HTTP/1.1 302 Found Use Fetch Endpoints (as defined in ) to obtain Subordinate Statements about the subject entity. Recursively traverse up the hierarchy until reaching a Trust Anchor. Build and validate the complete Trust Chain. - Apply federation policies to derive resolved metadata. + Apply federation policies to derive Resolved Metadata. @@ -8109,7 +8109,7 @@ HTTP/1.1 302 Found Entities that want to offload Trust Chain resolution complexity, Centralized trust evaluation services, - Performance optimization by caching resolved metadata, and + Performance optimization by caching Resolved Metadata, and Simplified integration for lightweight clients. @@ -8125,9 +8125,9 @@ HTTP/1.1 302 Found Identify a trusted resolver with a Resolve Endpoint. Submit the subject Entity Identifier and Trust Anchor to the resolver. The resolver performs complete Trust Chain resolution internally (following the bottom-up pattern). - The resolver returns resolved metadata and Trust Marks. + The resolver returns Resolved Metadata and Trust Marks. Optionally verify the resolver's own Trust Chain. - Use resolved metadata for protocol operations. + Use Resolved Metadata for protocol operations. @@ -8228,7 +8228,7 @@ HTTP/1.1 302 Found Entities may be required to include a - Trust Chain + Trust Chain in their requests, as explained in . The static Trust Chain gives a predefined trust path, meaning that Federation Entity Discovery need not be performed. @@ -10292,7 +10292,7 @@ HTTP/1.1 302 Found -
+
Let us assume the following: The project LIGO would like to offer access to its wiki to all OPs in eduGAIN. LIGO is registered with the InCommon @@ -10983,7 +10983,7 @@ Host: geant.org
-
+
Having verified the chain, the LIGO Wiki RP can proceed with the next step. @@ -10993,10 +10993,12 @@ Host: geant.org have by Immediate Superiors about their Immediate Subordinates and applying the combined policy to the - metadata statement that the Leaf Entity presented, we get: + metadata statement that the Leaf Entity presented, we get + the following Resolved Metadata for the + openid_provider Entity Type: - Resolved Metadata Derived from Trust Chain by Applying Metadata Policies + OP Resolved Metadata Derived from Trust Chain by Applying Metadata Policies Fixed #317: Corrected Trust Chain example. + + Applied clarifications identified while splitting the 1.1 specs. +