Revision Summary Date Revision History Revision Class Comments 3/2/2007 1.0 New Version 1.0 release 4/3/2007 1.1 Minor Clarified the meaning of the technical content. 5/11/2007 1.2 Minor Version 1.2 release 6/1/2007 1.2.1 Editorial Changed language and formatting in the technical content. 7/3/2007 1.3 Clarified the meaning of the technical content. 8/10/2007 1.3.1 Editorial Changed language and formatting in the technical content. 9/28/2007 1.3.2 Editorial Changed language and formatting in the technical content. 10/23/2007 2.0 Major Converted document to unified format and updated technical content. 1/25/2008 2.0.1 Editorial Changed language and formatting in the technical content.
3/14/2008 2.0.2 Editorial Changed language and formatting in the technical content. 6/20/2008 2.0.3 Editorial Changed language and formatting in the technical content. 7/25/2008 2.0.4 Editorial Changed language and formatting in the technical content. 8/29/2008 2.1 Minor Clarified technical content. 10/24/2008 3.0 Major Updated and revised the technical content. 12/5/2008 4.0 Major Updated and revised the technical content. 1/16/2009 5.0 Major Updated and revised the technical content. 2/27/2009 5.0.1 Editorial Changed language and formatting in the technical content. 4/10/2009 5.0.2 Editorial Changed language and formatting in the technical content.
5/22/2009 5.0.3 Editorial Changed language and formatting in the technical content. 7/2/2009 5.0.4 Editorial Changed language and formatting in the technical content. 8/14/2009 5.0.5 Editorial Changed language and formatting in the technical content. 9/25/2009 5.1 Minor Clarified the meaning of the technical content. 11/6/2009 5.1.1 Editorial Changed language and formatting in the technical content. 12/18/2009 5.1.2 Editorial Changed language and formatting in the technical content. 1/29/2010 5.1.3 Editorial Changed language and formatting in the technical content. 3/12/2010 5.1.4 Editorial Changed language and formatting in the technical content.
4/23/2010 6.0 Major Updated and revised the technical content. 6/4/2010 6.1 Minor Clarified the meaning of the technical content. 7/16/2010 6.2 Minor Clarified the meaning of the technical content. 8/27/2010 7.0 Updated and revised the technical content. 10/8/2010 7.0 None No changes to the meaning, language, or formatting of the technical content. 11/19/2010 8.0 Updated and revised the technical content. 1/7/2011 9.0 Updated and revised the technical content. 2/11/2011 9.0 None No changes to the meaning, language, or formatting of the technical content. 3/25/2011 9.0 None No changes to the meaning, language, or formatting
of the technical content. 5/6/2011 9.0 None No changes to the meaning, language, or formatting of the technical content. 6/17/2011 9.1 Minor Clarified the meaning of the technical content. 9/23/2011 10.0 Major Updated and revised the technical content. 12/16/2011 11.0 Major Updated and revised the technical content. 3/30/2012 11.0 None No changes to the meaning, language, or formatting of the technical content. 7/12/2012 11.0 None No changes to the meaning, language, or formatting of the technical content. 10/25/2012 11.0 None No changes to the meaning, language, or formatting of the technical content.
1/31/2013 11.0 None No changes to the meaning, language, or formatting of the technical content. 8/8/2013 12.0 Updated and revised the technical content. 11/14/2013 12.0 None No changes to the meaning, language, or formatting of the technical content. 2/13/2014 12.0 None No changes to the meaning, language, or formatting of the technical content. 5/15/2014 12.0 None No changes to the meaning, language, or formatting of the technical content. 6/30/2015 13.0 Major Significantly changed the technical content. 10/16/2015 13.0 None No changes to the meaning, language, or formatting of the technical content.
Protocol Details The following sections specify details of the Passport SSI Version 1.4 Protocol, including abstract data models and message processing An implementation SHOULD implement the role specified in section . An implementation MAY implement the role specified in section . An implementation MAY implement the role specified in section . Client Details Abstract Data Model This section describes a conceptual model of possible data organization that an implementation maintains to participate in this protocol. The described organization is provided to facilitate the explanation of how the protocol behaves. This document does not mandate that implementations adhere to this model as long as their external behavior is consistent with what is described in this document. In addition to the information with which MUST initially be configured, such as a (as specified in section ), clients MUST store the following states: Passport Session Table: A set of states for each passport session. Each entry in the passport session table is created and deleted as specified in sections and , respectively, and has the following states: Passport Configuration Data: All of the name/value pairs sent in the message. Original HTTP Verb: The HTTP verb for every HTTP request sent that has not yet received a response or whose response has included a . Original HTTP URL: The HTTP URL for every HTTP request sent that has not yet received a response, or whose response has included a Partner Server Challenge Message. Last Sign-in Request: The most recently sent message, in case it must be resent due to a redirect (as specified in section ). Sent First Authenticated Request: A flag that indicates whether the client has previously sent a . Passport Cookies: All HTTP returned by and . Partner Challenge: The challenge information provided in the Partner Server Challenge Message, as specified in section 2.2.8. Cached User Credentials: An optional name and password pair with timestamp to the second at which the were stored.<6> Timers None. Initialization Passport Session is initialized to empty.
Index A Abstract data model 25 18 28 23 server ( 23, 25, 28) 24 9 Authentication server 25 25 25 28 25 25 26 28 25 27 Authentication Server Challenge message 22 12 12 Authentication Server Logout message 22 13 13 Authentication Server Redirect message 22 13 13 Authentication Server-Instructed Update message 22 13 13 C 9 35 Client 18 19 19 23 19 23 19 23 18 11 Configuration server 28 28 28 28 28 28 28 28 28 D Data model - abstract 25 18 28 23 server ( 23, 25, 28) 11 E 29 F 10 First Authenticated Request message 13 24 13 G 6 H Higher-layer triggered events 25 19 28 23 server ( 23, 25) 28 I 32 32 32 8 Initialization 25 19 28 23 server ( 23, 25, 28) 6 L Local events 28 23 28 M