Issuer and webSSO profile.

["Giuseppe Sarno" <gsarno@nortel.com>]

Title: Issuer and webSSO profile.

Hi,

The Profile document in 4.1.4.1 states that the <issuer> element MUST be present and contain the unique identifier od the SP etc…

It is not clear though which element in the NameIDType is a MUST:

NAmeQualifier/SPNameQualifier/SPProvidedID.

From what is written on line 473-475 of the Core “NameQualifier and SPNameQualifier SHOULD be omitted…” I assume that the only MUST element is SPProvidedID.

Is that correct ?

NOTE: Also I noticed that <Issuer> is also used in the AuthResponse / Assertion and even if  now the issuer is an IDP the element in the <Issuer> tag is still "SP"NameQualifier or "SP"ProvidedID.

Thanks.
Giuseppe.