Đang chuẩn bị liên kết để tải về tài liệu:
Mastering Web Services Security - part 4

Đôi khi sau đó khách hàng giải quyết các đơn đặt hàng với số thẻ tín dụng, yêu cầu ePortal từ eBusiness.com bằng cách gọi settleOrder.Hãy nhớ rằng mối quan hệ giữa khách hàng và máy chủ luôn gắn liền với một lời gọi cụ thể. Ví dụ, trong hình 7.2, | Security Assertion Markup Language 113 want to use these addresses so they provided that option. Another element is what is called an AuthorityBinding. This is information that may be used to contact the SAML Authority that made the assertion in case the target wanted to get additional information on the authentication. The AuthenticationMethod identifies the type of authentication that was carried out while the Authenticationinstant contains the time that the authentication took place. All times in the schema are in Coordinated Universal Time UTC . Attribute Statement The attribute statement returns the attributes that the issuer of the assertion asserts are associated with the Subject identified in the common portion of the assertion. The schema definition of an attribute is element name AttributeStatement type saml AttributeStatementType complexType name AttributeStatementType complexContent extension base saml SubjectStatementAbstractType sequence element ref saml Attribute maxOccurs unbounded sequence extension complexContent complexType Where the attribute element contains the AttributeValues as shown below element name Attribute type saml AttributeType complexType name AttributeType complexContent extension base saml AttributeDesignatorType sequence element ref saml AttributeValue maxOccurs unbounded sequence extension complexContent complexType Similarly to the Authenticationstatement the AttributeType inherits from the AttributeStatementType. The AttributeDesignatorType is included below. element name AttributeDesignator type saml AttributeDesignatorType complexType name AttributeDesignatorType attribute name AttributeName type string use required attribute name AttributeNamespace type anyURI use required complexType Copyright OASIS Open 2001 2002 . All Rights Reserved 114 Chapter 5 You may have noticed that it is easy to run into some terminology confusion in this fragment. The XML schema defines a term called an attribute which we first encountered in .