Group administrators:
Draft Trust Router specification
A Trust Router is a proposed element in an ABFAB Federation that allows information about how a Relying Party (RP) can reach an AAA Server for a specified Identity Provider (IdP) realm to be dynamically propagated throughout an ABFAB Federation. Trust Routers also provide a mechanism for dynamic key generation between a Relying Party’s AAA client and an Identity Provider’s AAA Server, over a transitive Trust Path across the Federation.
This document is intended to be a living document, which will be maintained and updated throughout the Trust Router implementation to reflect the actual functionality of Trust Routers and related elements. At this point, the document is intended to describe the functionality of a Trust Router and related elements well enough to support scoping and planning of the detailed design and implementation of those elements.