OGC 07-118r9
13
Copyright © 2014 Open Geospatial Consortium
4 Terms and definitions
For the purposes of this document, the following terms and definitions apply:
4.1. Authentication [NR14]
Verification that a potential partner in a conversation is capable of representing a person or organization.
4.2. circle of trust
A federation of Service Providers and identity providers within which Service Providers accept the authentication asserted by the identity provider.
4.3. Claim
A statement made about a client, service or other resource e.g. name, identity, key, group, privilege, capability, etc..
4.4. client
Software component that can invoke an operation from a server i.e. a service consumer.
4.5. identifier
A character string that may be composed of numbers and characters that is exchanged between the client and the server with respect to a specific identity of a resource.
4.6. identity provider [NR14]
A kind of Service Provider that creates, maintains, and manages identity information for principals and provides principal authentication to other Service Providers within a
federation, such as with Web browser profiles.
4.7. interface
Named set of operations that characterise the behaviour of an entity [ISO 19119].
4.8. operation
Specification of a transformation or query that an object may be called to execute [ISO 19119].
4.9. parameter
Variable whose name and value are included in an operation request or response. 4.10.
PEP Policy Enforcement Point.
OGC 07-118r9
14
Copyright © 2014 Open Geospatial Consortium
4.11. principal [NR14]
A system entity whose identity can be authenticated.
4.12. Relying Party [NR26]
A Web application or service that consumes Security Tokens issued by a Security Token Service.
4.13. request
Invocation of an operation by a client.
4.14. response
Result of an operation, returned from a server to a client.
4.15. Security Token
A collection of claims. In the present Best Practice, the so-called SAML token is a specific kind of security token where the claims are SAML assertions.
4.16. Security Token Service
A security token service STS is a Web service that issues security tokens. The generation of a security token may be delegated by the Delegating STS to a Delegate
STS. 4.17.
server service instance A particular instance of a service [ISO 19119].
4.18. service
Distinct part of the functionality that is provided by an entity through interfaces [ISO 19119].
Capability which a Service Provider entity makes available to a service user entity at the interface between those entities [ISO 19104 terms repository].
4.19. service interface
Shared boundary between an automated system or human being and another automated system or human being [ISO 19101].
4.20. Service Provider [NR14]
A role donned by a system entity where the system entity provides services to principals or other system entities.
OGC 07-118r9
15
Copyright © 2014 Open Geospatial Consortium
4.21. transfer protocol
