[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: RE: [saml-dev] A rogue SP x impersonating a principal Z to SP y?
> It looks like the 'Audience restriction' in a signed, integrity ensured > assertion can be used by the iDP to signal, that this assertion should not > be used outside of SP x. Now the SP y will also have check it. Is this the > canonical way to do it? Yes. -- Scott
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]