1. A method, comprising:
receiving by a second server at a second site a first request from a first server at a first site to access a resource on the second site, wherein a first user has authenticated with the first site;
receiving from the first site a first assertion comprising an identifier indicating the first site as a source of the first assertion, an indication that the first user is authorized to access the resource on the second site and a first set of attributes associated with a first account on the first site;
determining, based upon the first assertion and a mapping, a subset of the first set of attributes to be used for mapping accounts on the first site to accounts on the second site, wherein the subset of the first set of attributes does not include an account identifier for the first account on the first site;
mapping the first account on the first site to a particular account on the second site based upon the subset of the first set of attributes;
receiving at the second site a second request from the first site to access the resource on the second site, wherein a second user has authenticated with the first site, the second user differing from the first user;
receiving from the first site a second assertion comprising an identifier indicating the first site as a source of the second assertion, an indication that the second user is authorized to access the resource on the second site, and a second set of attributes associated with a second account on the first site;
determining, based upon the second assertion and a mapping, a subset of the second set of attributes to be used for mapping accounts on the first site to accounts on the second site, wherein the subset of the second set of attributes does not include an account identifier for the second account on the first site, and wherein the subset of the second set of attributes includes at least one attribute in common with the subset of the first set of attributes; and
mapping the second account on the first site to the same particular account on the second site based upon the subset of the second set of attributes, thereby mapping a plurality of accounts on the first site to the same particular account on the second site.
2. The method of claim 1, wherein the resource comprises at least one of:
an application and a service.
3. The method of claim 2, wherein:
application includes at least one of: a travel agent application, a rental car application, an electronic commerce application, and a reservation application; and
service includes at least one of: a backup storage service, a storage service, a user authorization service, and an encryptiondecryption service.
4. The method of claim 1, further comprising:
receiving an artifact added to the first request, which artifact comprises an identity of the first site and a unique identifier corresponding to a specific assertion prepared by the first site; and
requesting the specific assertion based upon the artifact.
5. A machine readable storage medium, carrying one or more sequences of instructions for mapping accounts within a single sign-on computing environment, which instructions, when executed by one or more processors, cause the one or more processors to carry out the steps of:
receiving at a second site a first request from a first site to access a resource on the second site, wherein a first user has authenticated with the first site;
receiving from the first site a first assertion comprising an identifier indicating the first site as a source of the first assertion, an indication that the first user is authorized to access the resource on the second site and a first set of attributes associated with a first account on the first site;
determining, based upon the first assertion and a mapping, a subset of the first set of attributes to be used for mapping accounts on the first site to accounts on the second site, wherein the subset of the first set of attributes does not include an account identifier for the first account on the first site;
mapping the first account on the first site to a particular account on the second site based upon the subset of the first set of attributes;
receiving at the second site a second request from the first site to access the resource on the second site, wherein a second user has authenticated with the first site, the second user differing from the first user;
receiving from the first site a second assertion comprising an identifier indicating the first site as a source of the second assertion, an indication that the second user is authorized to access the resource on the second site, and a second set of attributes associated with a second account on the first site;
determining, based upon the second assertion and a mapping, a subset of the second set of attributes to be used for mapping accounts on the first site to accounts on the second site, wherein the subset of the second set of attributes does not include an account identifier for the second account on the first site, and wherein the subset of the second set of attributes includes at least one attribute in common with the subset of the first set of attributes; and
mapping the second account on the first site to the same particular account on the second site based upon the subset of the second set of attributes, thereby mapping a plurality of accounts on the first site to the same particular account on the second site.
6. The machine readable storage medium of claim 5, wherein the resource comprises at least one of:
an application and a service.
7. The machine readable storage medium of claim 6, wherein:
application includes at least one of: a travel agent application, a rental car application, an electronic commerce application, and a reservation application; and
service includes at least one of: a backup storage service, a storage service, a user authorization service, and an encryptiondecryption service.
8. The machine readable storage medium of claim 5, further comprising instructions for causing one or more processors to carry out the steps of:
receiving an artifact added to the first request, which artifact comprises an identity of the first site and a unique identifier corresponding to a specific assertion prepared by the first site; and
requesting the specific assertion based upon the artifact.
9. An apparatus, comprising:
one or more processors configured to implement:
a mechanism for receiving by a second server at a second site a first request from a first server at a first site to access a resource on the second site, wherein a first user has authenticated with the first site;
a mechanism for receiving from the first site a first assertion comprising an identifier indicating the first site as a source of the first assertion, an indication that the first user is authorized to access the resource on the second site and a first set of attributes associated with a first account on the first site;
a mechanism for determining, based upon the first assertion and a mapping, a subset of the first set of attributes to be used for mapping accounts on the first site to accounts on the second site, wherein the subset of the first set of attributes does not include an account identifier for the first account on the first site;
a mechanism for mapping the first account on the first site to a particular account on the second site based upon the subset of the first set of attributes;
a mechanism for receiving at the second site a second request from the first site to access the resource on the second site, wherein a second user has authenticated with the first site, the second user differing from the first user;
a mechanism for receiving from the first site a second assertion comprising an identifier indicating the first site as a source of the second assertion, an indication that the second user is authorized to access the resource on the second site, and a second set of attributes associated with a second account on the first site;
a mechanism for determining, based upon the second assertion and a mapping, a subset of the second set of attributes to be used for mapping accounts on the first site to accounts on the second site, wherein the subset of the second set of attributes does not include an account identifier for the second account on the first site, and wherein the subset of the second set of attributes includes at least one attribute in common with the subset of the first set of attributes; and
a mechanism for mapping the second account on the first site to the same particular account on the second site based upon the subset of the second set of attributes, thereby mapping a plurality of accounts on the first site to the same particular account on the second site.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. An apparatus for wrapping an item comprising:
a horizontal base;
a vertical support member attached to the horizontal base and extending upwardly from the horizontal base;
a horizontal member attached to the vertical support member opposite said horizontal base;
a plurality of clamps supported by the horizontal member arranged to secure wrapping material;
one or more ribbon holding elements connected to the vertical support member; and
a retaining member attached to the horizontal member to receive ribbon from the ribbon holding elements.
2. The apparatus of claim 1 wherein the vertical support member is adjustable in height.
3. The apparatus of claim 2 wherein the vertical support member comprises a plurality of telescoping sections, whereby height adjustment of the vertical support member is effectuated.
4. The apparatus of claim 1 wherein the clamps are secured to the horizontal member by an elastic cord.
5. The apparatus of claim 1 wherein the placement of the horizontal member relative to the vertical support member is adjustable.
6. The apparatus of claim 1 wherein the clamps are coated with rubber or plastic.