Configuration Guides › Federation Security Services Guide › Federation Security Services Overview › Federation Use Cases › Use Case 9: SAML 2.0 User Authorization Based on a User Attribute

Previous Topic: Use Case 8: Multi-protocol Support

Next Topic: Use Case 10: SAML 2.0 Single Sign-on with No Name ID at the IdP
Use Case 9: SAML 2.0 User Authorization Based on a User Attribute

In Use Case 9, sitemindercars.com is a car rental service.

A customer of sitemindercars.com logs in and authenticates at www.sitemindercars.com, then clicks a link to get a quote for a car rental. The customer has a customer profile at this site that includes the frequent flyer number of the customer with exampleair.com. The frequent flyer number of the customer miles determine a certain status level at sitemindercars.com, which offers the customer discounts on car rentals.

The following illustration shows this use case.

SiteMindercars.com wants to authorize its customers and present the appropriate discount information based on the frequent flyer number of the customer instead of requiring the customer to sign-on and authenticate at exampleair.com.