Federated TNC

Specification

Federated TNC standardizes the expression of endpoint posture information, and the methods of its communication between security domains, using the OASIS Security Assertion Mark-up Language (SAML).

Federated TNC defines three new profiles of SAML:

The Roaming Assessment Profile is intended for use in scenarios where endpoints roam between networks that are operated by different organizations. The Roaming Assessment Profile enables a ïhostÍ network operator to make richer authorization decisions, using posture information collected by the roaming endpoint’s ‘home’ operator, about roaming endpoints.

The Web Assessment Profile is intended for use in scenarios where a web application requires information (such as posture information) about the endpoint that a browser is operating on. The Web Assessment Profile enables the web application to make richer authorization decisions about endpoints, using posture information collected by the visiting endpoints security domain (for example, the corporate customer of a Software-as-a-Service provider), about connecting endpoints.