Role-based AAA for Service Utilization in Federated Domains
The Web service specifications managing authentication and authorization are still a work in progress. A large-scale application built today is in need of a solid authentication and authorization infrastructure. A role-based authentication, authorization and accounting (AAA) concept is able to provide the services needed, while it is possible to gain additional flexibility to handle the co-operation between different authentication and authorization infrastructures.
Full Text: PDF