Strawman -10/EMSK deletion requirement?

Hi Avi,  

> 
> Perhaps you missed my poorly stated point 
> 
> What if the user is requesting access to a new
application? 
> which could
> also involve the modification of the user's profile. 
> If EMSK is not there, then what do I do? Restart the
session? No.
> 
> At anyrate I belive that there could be other use
cases... I gave two
> reason why:
> 
> Just-in-time;
> Dynamic-Application provisioning.

[Joe] Would you agree with the following:

"For any specific application once the AMSK is
generated for that
application there is no requirement to cache the EMSK for
that
application, however there may be a need to cache the EMSK
if the system
requires other Masks to be generated. "  

This makes the caching more of a system issue than an issue
for one
particular application.   

____________________________________________________________
_____
To unsubscribe or modify your subscription options, please
visit:
http:/
/lists.frascone.com/mailman/listinfo/eap

Arhives: http://lists.
frascone.com/pipermail/eap