Chapter 3. Web Services integration 63
Where:
1. The system entity (the client or server that receives the client request)
requests access to a resource.
2. The system entity request is redirected to the Credentials collector where the
System entity presents its identifiable information to the Credential collector.
3. Using the System entity’s information, the Authentication authority creates
Authentication assertion and inserts it into SAML data.
4. Using this data, the Attribute authority creates Attribute assertion and inserts
it into SAML data.
5. Using this data, the Policy Decision point creates Authorization decision
assertion and inserts it into SAML data.
6. Finally, the Policy enforcement point receives the collected SAML data. If