RE: [saml-dev] What is <ProxyRestriction>?

["Scott Cantor" <cantor.2@osu.edu>]

Mike Tran wrote on 2009-02-13:
> What I'm a little vague on is what does it mean exactly for the relying
party to
> create assertions based on the original assertion?

Gateways. SP/IdP combinations that issue assertions based on assertions to
proxy across trust boundaries.

> Can someone provide an example use case for this?

IdP proxying is covered in core.

-- Scott