1. SPML Interoperability Demonstration Gavenraj Sodhi, Business Layers 14 April 2003 RSA Conference 2003

2. RA Digital Certificate Validates SAML Token Returns validation Success/Failure SOAP message with SPML Body and SAML Token Header - Add New Contractor  If Validation is successful, request for adding new contractor is passed  Request registered Notification  SPML: Create New Account SPML: Create New Account  SPML: Account Created  Request fulfilled and New Contractor is provisioned  Enterprise Access Management Service PSP PST SAML Token SPML SOAP Message Header Body

3. © 2001-2002 OASIS Open Inc. SPML Client (RA) The Initial screen for adding a user

4. © 2001-2002 OASIS Open Inc. SPML Client (RA) Click on the Add user button once all the user details are filled.

5. © 2001-2002 OASIS Open Inc. SPML Client (RA) A message with the SPML request created from the user information will be displayed

6. © 2001-2002 OASIS Open Inc. SPML Client (RA) The SAML Authentication information in the SOAP header

7. © 2001-2002 OASIS Open Inc. SAML Authentication The message on the SAML Authentication server indicating that the SAML authentication of the user succeeded

8. © 2001-2002 OASIS Open Inc. SAML Authorization The message on the SAML Authorization server indicating that the SAML authorization of the user succeeded

9. © 2001-2002 OASIS Open Inc. SPML Client (RA) The SPML response will be displayed once the PSP adds the user

10. © 2001-2002 OASIS Open Inc. SPML Client (RA) The result of the user add operation is displayed at the bottom of the page The user details can be viewed by selecting View Details.

11. © 2001-2002 OASIS Open Inc. SPML Client (RA) The details of the user add operation Information elements sent to the client by the PSP

12. © 2001-2002 OASIS Open Inc. SPML Processing (PSP) The user added can be viewed from PSP’s (eProvision) interface

13. © 2001-2002 OASIS Open Inc. eProvision (PSP) The activities of the user added can then be tracked from the activities section of the PSP’s (eProvision) interface

14. © 2001-2002 OASIS Open Inc. SPML addRequest to PST The PSP generated SPML addRequest that can be sent to any SPML compliant PST.

15. Thank you Gavenraj Sodhi Gavenraj.Sodhi@businesslayers.com