User avatar
flori_ava_star:~cursor_blinking made-with-estrogen verifiedlesbian @star@amazonawaws.com
2mo
honestly it's quite shrimple
Participants: Actor Charlie, Server OIDC Identity Provider, Entity SCIM client, Server Home Server. Server OIDC Identity Provider and Entity SCIM client surrounded by box with label "Identity Provider Side". Home Server surrounded by box with label "polyproto Side". 1. Charlie sends registration data to the OIDC Identity Provider. 2. In parallel: Identity Provider sends a success response with an HSAT to Charlie, and notifies the SCIM client that actor "Charlie" was created. 3. SCIM client sends data about the new actor "Charlie" in SCIM format to the Home server. 4. Home server creates a database representation of actor "Charlie" with status PENDING. 5. Charlie sends an authenticated request to the Home server with an ID-CSR (request for ID-Cert). 6. Home server validates authentication claims (opaque token introspection, JWT validation, etc.). 7. Home server updates actor "Charlie" status to ACTIVE. 8. Home server goes through the ID-Cert creation flow. 9. Home server associates the ID-Cert with Charlie's OIDC authenticated session. 10. Home server responds to Charlie with the ID-Cert.
1
0
3
0
User avatar
TaylkanStenver @TaylkanStenver@pawb.fun
2mo
@star Damn i remember these types of sheets from classes, i actually liked doing these
0
0
1
0