Proxy Granting Ticket IOU

[Bill Bailey]

Hello,

 

I am trying to fully understand how proxy validation works and I think I
almost have it. The proxy validation walkthrough on the WIKI was very
helpful. But I do have one question.

 

Can someone more fully explain the purpose of the Proxy Granting Ticket
IOU?

 

When I was reading the protocol document and the walkthrough, it wasn't
obvious to me how it is used. I notice that it is returned in the
response from /serviceValidate or /proxyValidate and I saw that it is
included in the HTTP GET call to the pgtUrl callback (along with pgtId
which is the Proxy Granting Ticket), but I didn't see where it was
actually used.

 

Is it purely a method of allowing the application to correlate the
ticket received via the callback to the a specific request it made to
/serviceValidate or /proxyValidate?

 

Thanks in advance.


Bill Bailey

Senior Developer / DBA

Northland, A Church Distributed

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20070604/f474e4ab/attachment.html