{'fraction_non_alphanumeric': 0.019128586609989374, 'fraction_numerical': 0.004250797024442083, 'mean_word_length': 5.197368421052632, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
A Delegation Framework for Liberty

Building support for delegation services into an identity federation system enhances its flexibility and scalability. Users may need to delegate all (or a subset) of their access rights or privileges to other parties in the system. However, the Liberty Alliance, an industry consortium that aims to build open standard-based specifications for identity federation systems, does not include delegation functionality in its specifications. In this paper we propose a delegation framework for Liberty that can be readily integrated into the currently deployed specifications. The framework takes advantage of the trust relationships that exist by definition within the Liberty circles of trust, and is based on extending the use of attribute statements in SAML assertions. The framework is built on SAML 2.0 and the Liberty ID-FF 1.2 single sign-on profiles, and supports both direct and indirect delegation.