[cap-talk] Architectural Choices for Security: terminology

[Jed Donnelley]

On 11/16/2007 3:21 PM, Karp, Alan H wrote:
> ...while we've shown
> that SAML certificates can be used to combine designation with
> authorization, they can also be used as authorizations distinct from the
> designation.

To what end?  I.e. what value is there in separating authorizations
from designations?

--Jed  http://www.webstart.com/jed/