干旱区生态环境知识资源中心

SAML2.0 was founded on a base of five protocols of identity authentication (OASIS swill 1.0 and saml 1.1, Liberty alliance ID- FF1.1 and ID- FF1.2, Shibboleth), which was not compatible one another. A new standard are formed by syncretize and unite all kinds of key application conditions and characteristic of that five protocols.. In this paper, the author proposes a secure delegation model based on SAML that provides confidentiality and integrity about the user information. The proposed mechanism defines extended agent delegation by Security Assertion Markup Language (SAML) and proposes not only authentication but also privilege grant by access control server based on eXtensible Access Control Markup Language (XACML)