Buyer requests authorization from Buyer Security System to submit a given order. Buyer Security System provides a SAML AuthZ Decision assertion to Buyer, stating that Buyer is allowed to submit the order. Buyer submits order to B2B Exchange, providing AuthN assertion and AuthZ decision assertion. B2B exchange adds AuthZ decision assertion data, stating that the Buyer is permitted to use the exchange to make this order. B2B exchange submits order to Seller.
Seller validates the order, using the assertions.
Seller requests authorization from Seller Security System to fulfill a given order. Seller Security System provides a SAML AuthZ Decision assertion to Seller, stating that Seller is allowed to fulfill the order. Seller submits intention to fulfill the order to the B2B exchange, including AuthN assertions and AuthZ decision assertions. B2B exchange adds AuthN data, specifying that it used the original SAML AuthN assertion to authenticate the Seller. B2B exchange add AuthZ decision data, specifying that the seller is authorized to fulfill this order through the exchange.