security-services message

Subject: saml request-response and subject

From: Simon Godik <sgodik@crosslogix.com>
To: "'pmishra@netegrity.com'" <pmishra@netegrity.com>
Date: Mon, 30 Jul 2001 17:56:24 -0700

Title: saml request-response and subject

In draft-sstc-protocol-discussion-01.doc saml-query-type and saml-response-type are defined.

Do we have any requirement on subject element type correlation between query and response or is it left to the
issuing party?

For example, if saml-attribute-query refers to subject by Authenticator does it mean that AttributeAssertion in the
response also have to refer to the subject by Authenticator, or can it use something else like NameIdentifier?

Simon Godik