Method and system for secure binding register name identifier profile

摘要

A method, a system, an apparatus, and a computer program product are presented for improving a register name identifier profile within a federated computing environment such that the register name identifier profile is enhanced to be more securely binding between two federated entities within the federated computing environment, such as an identity provider and a service provider. After the first federated entity sends a register name identifier request for a principal to the second federated entity, the second federated entity performs an authentication operation for the principal. In response to successfully completing the authentication operation, the second federated entity registers or modifies a name identifier for the principal that has been extracted from the received register name identifier request.

主权项

1. A method for performing an operation within a federated computing environment, the method comprising:
receiving a register name identifier (RNI) request for a principal from a first federated entity at a second federated entity within the federated computing environment; in response to receiving the register name identifier (RNI) request for the principal, performing an authentication operation at the second federated entity for the principal; in response to successfully completing the authentication operation, registering or modifying within an RNI profile a name identifier from the received register name identifier (RNI) request at the second federated entity; and sending a register name identifier (RNI) response from the second federated entity to the first federated entity.