Subject: [sacm] user in information model

From: David Harrington <[email-masked]>
Date: Tue, 11 Nov 2014 11:24:15 -0500

Hi,

>>    o  User: [cek: Do we want this?  If one user uses different
>>       credentials at different times, do we think SACM components will
>>       need know that it's the same user?]

In UNIX environments, it is often recommended that users have multiple logins - one with admin authorization, and one with only “user” level authorization.
I do not think it is important for the system to know that it is the same person using different logins. It is enough to know that they are different logins, with different authentication and different authorizations.

In situations where usage (and billing) are important, the binding of two logins as representing the same user/organization/account, I think that should be handled at the (billing) application, not the endpoint.

David Harrington
[email-masked]