#FIG 3.2 Produced by xfig version 3.2.5 Landscape Center Inches Letter 100.00 Single -2 1200 2 5 1 0 1 0 7 50 -1 -1 0.000 0 0 0 0 -456.294 2308.479 5100 1650 4950 3750 4050 5625 5 1 0 1 0 7 50 -1 -1 0.000 0 1 0 0 -1040.073 2361.397 3675 5625 4575 3525 4650 1650 5 1 0 1 0 7 50 -1 -1 0.000 0 0 0 0 48.657 2507.541 5475 1650 5400 3750 4350 5925 5 1 0 1 0 7 50 -1 -1 0.000 0 0 0 0 4068.750 3506.250 3000 6225 2325 5850 1725 5250 5 1 0 1 0 7 50 -1 -1 0.000 0 1 0 0 4648.019 4696.453 4350 1275 2400 2100 1275 4050 5 1 0 1 0 7 50 -1 -1 0.000 0 0 0 0 4875.000 4856.250 1575 4050 2250 2700 4350 1500 5 1 0 1 0 7 50 -1 -1 0.000 0 0 0 0 5601.220 5981.708 6975 1650 9375 3450 10125 5550 5 1 0 1 0 7 50 -1 -1 0.000 0 0 0 0 4787.415 6396.704 6675 1650 8850 3300 9825 5550 5 1 0 1 0 7 50 -1 -1 0.000 0 0 0 0 3759.133 7240.959 6150 1650 8325 3225 9600 5550 5 1 0 1 0 7 50 -1 -1 0.000 0 0 0 0 4068.750 3881.250 3000 6600 2325 6225 1725 5625 5 1 0 1 0 7 50 -1 -1 0.000 0 1 0 0 5836.055 3500.879 900 6150 3750 8700 9600 7650 5 1 0 1 0 7 50 -1 -1 0.000 0 1 0 0 5714.893 3881.029 1200 6150 3975 8625 9525 7200 2 2 0 1 0 7 50 -1 -1 0.000 0 0 -1 0 0 5 3000 5625 4200 5625 4200 7725 3000 7725 3000 5625 2 2 0 1 0 7 50 -1 -1 0.000 0 0 -1 0 0 5 525 4050 1725 4050 1725 6150 525 6150 525 4050 2 2 0 1 0 7 50 -1 -1 0.000 0 0 -1 0 0 5 3300 5925 4500 5925 4500 8025 3300 8025 3300 5925 2 2 0 1 0 7 50 -1 -1 0.000 0 0 -1 0 0 5 3675 6225 4875 6225 4875 8325 3675 8325 3675 6225 2 2 0 1 0 7 50 -1 -1 0.000 0 0 -1 0 0 5 9525 5550 10725 5550 10725 7650 9525 7650 9525 5550 2 2 0 1 0 7 50 -1 -1 0.000 0 0 -1 0 0 5 4350 600 7425 600 7425 1650 4350 1650 4350 600 2 2 0 1 0 7 50 -1 -1 0.000 0 0 -1 0 0 5 10050 6300 11250 6300 11250 8400 10050 8400 10050 6300 2 2 0 1 0 7 50 -1 -1 0.000 0 0 -1 0 0 5 9750 6000 10950 6000 10950 8100 9750 8100 9750 6000 4 0 0 50 -1 0 12 0.0000 4 180 840 675 4425 Auth Page\001 4 0 0 50 -1 0 12 0.0000 4 135 510 4725 900 Client\001 4 0 0 50 -1 0 12 0.0000 4 135 825 3150 5850 IPA server\001 4 0 0 50 -1 0 12 0.0000 4 135 975 9675 5775 Other server\001 4 0 0 50 -1 0 12 0.0000 4 135 105 4500 3150 1\001 4 0 0 50 -1 0 12 0.0000 4 135 105 2550 2625 4\001 4 0 0 50 -1 0 12 0.0000 4 135 105 5625 3000 5\001 4 0 0 50 -1 0 12 0.0000 4 135 105 8625 3300 2\001 4 0 0 50 -1 0 12 0.0000 4 135 105 9075 2925 5\001 4 0 0 50 -1 0 12 0.0000 4 135 105 9075 7500 6\001 4 0 0 50 -1 0 12 0.0000 4 135 105 9225 7875 7\001 4 0 0 50 -1 0 12 0.0000 4 135 105 2325 5775 6\001 4 0 0 50 -1 0 12 0.0000 4 135 105 2250 6450 7\001 4 0 0 50 -1 0 12 0.0000 4 135 105 2025 2250 3\001 4 0 0 50 -1 0 12 0.0000 4 135 105 4950 3075 2\001 4 0 0 50 -1 0 12 0.0000 4 135 105 8400 3600 1\001 4 0 0 50 -1 0 12 0.0000 4 180 2790 8625 225 1. client tries to access application\001 4 0 0 50 -1 0 12 0.0000 4 180 2280 8625 450 2. app redirects to auth page\001 4 0 0 50 -1 0 12 0.0000 4 180 2145 8625 675 3 client auths to auth page\001 4 0 0 50 -1 0 12 0.0000 4 180 2190 8625 900 4. auth page returns cookie\001 4 0 0 50 -1 0 12 0.0000 4 180 2400 8625 1125 5 client returns to application\001 4 0 0 50 -1 0 12 0.0000 4 180 2880 8625 1350 6 application checks if cookie is ok\001 4 0 0 50 -1 0 12 0.0000 4 180 2475 8625 1575 6 on ipa it gets reply as well as\001 4 0 0 50 -1 0 12 0.0000 4 180 2475 8625 1800 pointer to cached credentials ?\001 4 0 0 50 -1 0 12 0.0000 4 180 2430 6450 4875 USe OpenID for remote apps ?\001