The orginal MIT Roles system assumed that all ASPECs pertained to people that had accounts which existed in the central MIT namespace. In other words, the Subject of any ASPEC was a Kerberos principal name associated with someone that had an MIT account. One of perMIT's primary goals is to broaden the scope of Subjects to support applications that deal with federated authentication. Subjects will also be able to be systems, services, or processes that can authenticate.
| Gliffy Diagram |
|---|
| size | L |
|---|
| name | Schema changes to support federation |
|---|
| page | PERMIT:Adding support for federation |
|---|
| pageid | 47908002 |
|---|
| align | left |
|---|
| space | PERMIT |
|---|
|