From 85c3be898719ecb13f5c7fd6a14f6d3f5259e545 Mon Sep 17 00:00:00 2001
From: Frederic Peters <fpeters@entrouvert.com>
Date: Wed, 26 Jan 2005 14:57:33 +0000
Subject: blah blah in reference manual introduction

---
 docs/reference/lasso.sgml | 68 +++++++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 66 insertions(+), 2 deletions(-)

(limited to 'docs')

diff --git a/docs/reference/lasso.sgml b/docs/reference/lasso.sgml
index e1508a64..c9654c92 100644
--- a/docs/reference/lasso.sgml
+++ b/docs/reference/lasso.sgml
@@ -81,7 +81,7 @@
   </bookinfo>
 
   <chapter id="lasso">
-    <title>Lasso Overview</title>
+    <title>Lasso &amp; Liberty Alliance Overview</title>
     <para>
 Lasso is a library which provides all the necessary functions for sites to
 implement <ulink url="http://www.projectliberty.org">Liberty Alliance</ulink>
@@ -90,7 +90,71 @@ and related protocols.
     </para>
 
     <para>
-It is built on top of <ulink url="http://www.xmlsoft.org">libxml2</ulink>,
+Founded in 2001 by Sun in order to propose an alternative to the
+Microsoft Passport project, the consortium Liberty Alliance aims to
+promote an infrastructure of standards allowing the management of
+federated identities between several services or systems.
+    </para>
+
+    <para>
+
+A federated identity (or network identity) of an individual or a legal entity
+on Internet gather at the same time:
+
+<itemizedlist>
+  <listitem>
+   Its identification (name, co-ordinates, preferences, history...);
+  </listitem>
+  <listitem>
+   Its authentication (which guarantees the validity of an identity);
+  </listitem>
+  <listitem>
+   Its authorisations (access rights to information, access rights to
+   services).
+  </listitem>
+</itemizedlist>
+</para>
+
+<para>
+Liberty standards aims to give more coherence to a network identity
+which is scattered (numerous logins and passwords) today. This identity
+becomes frequently delicate to manage, both for customers and businesses.
+</para>
+ 
+<para>
+The Liberty Alliance specifications define three types of actors:
+
+<itemizedlist>
+  <listitem>
+    The user, person or entity who can acquire an identity;
+  </listitem>
+  <listitem>
+    The identity provider which creates and manages the identity of
+    the users, and authenticates them to the service providers;
+  </listitem>
+  <listitem>
+    The service provider who provides services to the users once that
+    they have authenticated to an identity provider.
+  </listitem>
+</itemizedlist>
+</para>
+
+<para>
+One calls circle of trust a grouping of identity providers and service
+providers which agreed to share (to federate) the identity of their users.
+</para>
+
+    <para>
+Contrary to the other implementations of Liberty Alliance, Lasso is not a
+full-fedged system (most often Java/J2EE) but a fast and tiny C library.  The
+integration work is largely facilitated.  An existing site should be able to
+integrate it in a few days of development, without calling into question its
+architecture.  Lasso is a library written in C Language. It works on GNU/Linux,
+Windows and UNIX and has complete bindings for Java, Perl, PHP and Python.
+    </para>
+
+<para>
+Lasso is built on top of <ulink url="http://www.xmlsoft.org">libxml2</ulink>,
 <ulink url="http://www.aleksey.com/xmlsec/">XMLSec</ulink> and
 <ulink url="http://www.openssl.org">OpenSSL</ulink> and is licensed under
 the <ulink url="http://lasso.entrouvert.org/license">GNU General Public License</ulink>
-- 
cgit