security-bindings message

Subject: MIME type for SAML messages

From: Tim Moses <tim.moses@entrust.com>
To: 'Oasis security services bindings' <security-bindings@lists.oasis-open.org>
Date: Fri, 27 Jul 2001 09:22:25 -0400

Title: MIME type for SAML messages

Prateek - I have investigated this topic a little. The SAML servlet on an HTTP server will have a distinct URL (the "partner ID" of the artifact will map to the SAML servlet URL). So, all SAML messages over HTTP will go to a servlet that is expecting to process only SAML messages. For this reason, a MIME type for SAML messages is not strictly needed. However, in the fullness of time, HTTP servers may be receiving XML messages for a large number of different purposes. So, we should consider registering a MIME type to distinguish the SAML messages from all the other stuff.

Best regards. Tim.

------------------------------------------------------------------------
Tim Moses
Tel: 613.270.3183