3 ms·
U-Prove can use any number of identity providers. It can even create a single new token assembled from pieces (claims, or inferred claims like age) of multiple
by Spearchucker 13y ago
U-Prove can use any number of identity providers. It can even create a single new token assembled from pieces (claims, or inferred claims like age) of multiple identity providers.
Decoupling an identity from a provider invalidates the identity. Identities have value because of the providers' relationships with subjects. It's up to the resource provider to establish trust relationships with other identity providers.
- icebraining 13y agoFair enough, it seems I have to do some reading on that proposal. Still, what happens when a single IdP invalidates their claims? Is the whole token invalidated?
- Spearchucker 13y agoThe token is invalidated, as with any identity system. That's how it should work. Think certificate revocation lists, for example. The identity provider has to be able to revoke certs, or the entire trust model would fall apart.