A RADIUS Attribute, Binding, Profiles, Name Identifier Format, and Confirmation Methods for the Security Assertion Markup Language (SAML)
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 32
- Abstract
- This document describes the use of the Security Assertion Markup Language (SAML) with RADIUS in the context of the Application Bridging for Federated Access Beyond web (ABFAB) architecture. It defines two RADIUS attributes, a SAML binding, a SAML name identifier format, two SAML profiles, and two SAML confirmation methods. The RADIUS attributes permit encapsulation of SAML Assertions and protocol messages within RADIUS, allowing SAML entities to communicate using the binding. The two profiles describe the application of this binding for ABFAB authentication and assertion Query/Request, enabling a Relying Party to request authentication of, or assertions for, users or machines (clients). These clients may be named using a Network Access Identifier (NAI) name identifier format. Finally, the subject confirmation methods allow requests and queries to be issued for a previously authenticated user or machine without needing to explicitly identify them as the subject. The use of the artifacts defined in this document is not exclusive to ABFAB. They can be applied in any Authentication, Authorization, and Accounting (AAA) scenario, such as network access control.
- Publication Date
- 2016-05-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC7833- Link
- https://doi.org/10.17487/RFC7833
- Author(s)
- Josh HowlettSam HartmanAlejandro Pérez-Méndez
- Keyword(s)
- ABFAB, AAA, EAP, RADIUS, SAML
Latest version of IETF RFC 7833
Document Versions — IETF RFC 7833
-
▶ IETF RFC 7833 (2016-05-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- Cantor, S., Hirsch, F., Kemp, J., Philpott, R., and E. Maler, "Bindings for the OASIS Security Assertion Markup Language (SAML) V2.0", OASIS Standard saml-bindings-2.0-os, March 2005, < http://docs.oasis-open.org/security/saml/v2.0/ saml-bindings-2.0-os.pdf >. EXTERNAL
- Cantor, S., Moreh, J., Philpott, R., and E. Maler, "Metadata for the OASIS Security Assertion Markup Language (SAML) V2.0", OASIS Standard saml-metadata-2.0-os, March 2005, < http://docs.oasis-open.org/security/ saml/v2.0/saml-metadata-2.0-os.pdf >. EXTERNAL
- Cantor, S., Kemp, J., Philpott, R., and E. Maler, "Assertions and Protocols for the OASIS Security Assertion Markup Language (SAML) V2.0", OASIS Standard saml-core-2.0-os, March 2005, < http://docs.oasis-open.org/security/saml/v2.0/ saml-core-2.0-os.pdf >. EXTERNAL
- Hughes, J., Cantor, S., Hodges, J., Hirsch, F., Mishra, P., Philpott, R., and E. Maler, "Profiles for the OASIS Security Assertion Markup Language (SAML) V2.0", OASIS Standard OASIS.saml-profiles-2.0-os, March 2005, < http://docs.oasis-open.org/security/saml/v2.0/ saml-profiles-2.0-os.pdf >. EXTERNAL
- IETF RFC 2119 [Active*]
- IETF RFC 2865 [Active*]
- IETF RFC 3575 [Active*]
- IETF RFC 3579 [Active*]
- IETF RFC 6614 [Active*]
- IETF RFC 6929 [Active*]
- IETF RFC 7542 [Active*]
Bibliographic Reference(s)
- IETF.draft-ietf-radext-bigger-packets-07 — RADIUS-Large-Pkts EXTERNAL
- IETF RFC 3553 [Active*]
- IETF RFC 5226 [Superseded*]
- IETF RFC 6733 [Active*]
- IETF RFC 7055 [Active*]
- IETF RFC 7499 [Active*]
- IETF RFC 7831 [Active*]
- W3C XML Schema P1 [Active]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC7833.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 7833, A RADIUS Attribute, Binding, Profiles, Name Identifier Format, and Confirmation Methods for the Security Assertion Markup Language (SAML). Available at https://doi.org/10.17487/RFC7833
Snippet:
IETF RFC 7833, A RADIUS Attribute, Binding, Profiles, Name Identifier Format, and Confirmation Methods for the Security Assertion Markup Language (SAML). Available at https://doi.org/10.17487/RFC7833
HTML (ISO 690 compliant)
Preview:
IETF RFC 7833, A RADIUS Attribute, Binding, Profiles, Name Identifier Format, and Confirmation Methods for the Security Assertion Markup Language (SAML). Available at https://doi.org/10.17487/RFC7833
Snippet:
<span class="citation"><cite>IETF RFC 7833</cite>, A RADIUS Attribute, Binding, Profiles, Name Identifier Format, and Confirmation Methods for the Security Assertion Markup Language (SAML). Available at <a href="https://doi.org/10.17487/RFC7833" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7833</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 7833, A RADIUS Attribute, Binding, Profiles, Name Identifier Format, and Confirmation Methods for the Security Assertion Markup Language (SAML)
doi: 10.17487/RFC7833
url: https://doi.org/10.17487/RFC7833
doi: 10.17487/RFC7833
url: https://doi.org/10.17487/RFC7833
Snippet:
<li> <cite id="bib-rfc7833">IETF RFC 7833</cite>, A RADIUS Attribute, Binding, Profiles, Name Identifier Format, and Confirmation Methods for the Security Assertion Markup Language (SAML) <span class="doi">10.17487/RFC7833</span> </li>
Referenced By
- IETF RFC 7831 [Active*]
- IETF RFC 7930 [Active*]