RE: [security-services] A browser/POST question...

[Scott Cantor <cantor.2@osu.edu>]

> OK, so the proposed clarification would be replace:
> 1)
> 
> Section 4.1.1.6 
> 
> The <saml:ConfirmationMethod> element of each assertion MUST 
> be set to urn:oasis:names:tc:SAML:1.0:cm:artifact-01. 
> 
> BY
> 
> The <saml:ConfirmationMethod> element of each statement in 
> each assertion MUST be set to 
> urn:oasis:names:tc:SAML:1.0:cm:artifact-01

The problem with that is that it assumes that each statement even has a subject (not a requirement, of course, though only
SubjectStatements are currently defined by SAML).

Maybe that's being overly pedantic. ;-)

-- Scott