Re: [saml-dev] Is my English description of an Authentication Assertion correct?

["Tom Scavo" <trscavo@gmail.com>]

On 5/8/06, Costello, Roger L. <costello@mitre.org> wrote:
>
> I, http://www.AirlineInc.com, assert that I authenticated this Subject
> (which I identify by email address): j.doe@acompany.com

Strictly speaking, the *format* of the NameID is that of an e-mail
address (according to RFC 2822).  The spec does not say the identifier
must be a resolvable e-mail address (which the above seems to imply).

Tom