[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: RE: Attribute values or the lack therof
Hey Guys - Got a lurker to pipe in for a moment: I agree with Roberts' start. If the requestor does not have permission to receive an attribute or element, it is not returned and the subsequent test on the assertion must take that into account when asserted/validated by the issuing authority. However, as far as the original question, a NULL *IS* a valid string. So, that may be the way to send an empty element.... - Hank Simon -----Original Message----- From: Scott Cantor [mailto:cantor.2@osu.edu] Sent: Tuesday, September 02, 2003 6:42 PM To: 'Philpott, Robert'; 'Jim Christopher'; saml-dev@lists.oasis-open.org Cc: security-services@lists.oasis-open.org Subject: RE: Attribute values or the lack therof > You have dealt with this issue by defining the proprietary > URN. The rules about defining proprietary URN's has always > been a bit fuzzy to me, but I'm not sure that doing what you > did conforms to URN registration "rules". Perhaps someone > better versed in URN namespace definitions can elaborate. Right, strictly speaking, you can't just invent URNs. This is only an issue in practice for published documents and implementations that go beyond internal use, but it's better form to use a URL for something like this unless you have a real URN namespace to use. > I think the "right" solution to this issue is to fix the SAML > spec by permitting an AttributeValue element to be returned > as an empty element - i.e. <AttributeValue/>. +1 > One "might" > say that this is already allowed by declaring that section > 1.2.1 does not apply to the "user" data provided in this > element. Section 1.2.1 starts out with the sentence "All > SAML string and URI reference values have the type xsd:String > and xsd:anyURI, respectively...". So one could just say that > the attribute value data is not a "SAML string". Thus it can > be permissible to send an empty element for <AttributeValue>. That would probably be my interpretation as well, but we should clarify it. I rather expect the schema to change there for 2.0 anyway. -- Scott To unsubscribe from this list, send a post to saml-dev-unsubscribe@lists.oasis-open.org.
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]