Where is http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name defined?

security identity claims-based-identity claims
Steven Padfield picture Steven Padfield · Jun 30, 2017 · Viewed 11k times · Source

OASIS owns the http://schemas.xmlsoap.org/ws/2005/05/identity namespace, but I can't find anywhere that defines the "name" claim type. There are other claims like First Name, Last Name, Email Address, etc. but no claim that just refers to Name.

Is there an authoritative location where this claim type is defined? I'm interested in understanding the correct usage of this claim.

Answer

Ruard van Elburg picture Ruard van Elburg · Jul 1, 2017

The only source I could find right now that mentions the namespace, is the Windows Identity Foundation documentation:

https://msdn.microsoft.com/en-us/library/microsoft.identitymodel.claims.claimtypes_members.aspx

Though I cannot find it at the moment, it seems to me that Microsoft used an official source. I don't think it would otherwise have been implemented.

Just found an interesting thread: Correct usage of the Name Claim (http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name)

Related questions

Asp.net Identity password hashing

The new ASP.net Identity project has brought some useful code and interfaces for website security. To implement a custom system using the interfaces (instead of using the standard Entity Framework implementation included in the MVC 5 template) an IPasswordHasher is …

Read More
JwtSecurityTokenHandler and TokenValidationParameters

I used to have a reference to Microsoft.IdentityModel.Tokens.JWT and everything was working fine. I updated to use the new System.IdentityModel.Tokens.Jwt but nothing seems to work now. It cannot find the ValidateToken method of the …

Read More
How can I prevent SQL injection in PHP?

If user input is inserted without modification into an SQL query, then the application becomes vulnerable to SQL injection, like in the following example: $unsafe_variable = $_POST['user_input']; mysql_query("INSERT INTO `table` (`column`) VALUES ('$unsafe_variable')"); That's …

Read More