Re: [saml-dev] JSON metadata

[Tom Scavo <trscavo@gmail.com>]

On Thu, Sep 27, 2012 at 1:28 PM, Ian Young <ian@iay.org.uk> wrote:
>
> On 25 Sep 2012, at 17:24, Tom Scavo <trscavo@gmail.com> wrote:
>
>> The real value of a JSON metadata spec will be felt at the federation
>> level. With such a spec, existing SAML federations could more easily
>> incorporate non-SAML roles and endpoints into federation metadata and
>> likewise more easily distribute federation metadata to non-SAML
>> entities.
>
> Can you give a quick explanation as to why you think that JSON is more extensible than XML in this space?  The SAML metadata standard has a pretty robust extension mechanism already, after all.

That's true, SAML metadata is completely extensible in this regard, I
didn't mean to imply otherwise. My point is, if SAML federations are
to interfederate with non-SAML federations (built around OAuth2,
specifically), XML metadata is not going to cut the mustard.

Tom