RE: [security-services] Roles for SAML 2.0 Metadata

[Scott Cantor <cantor.2@osu.edu>]

>you are spot on, as I expect it be done just like you say. The issue I have
>is that various profiles should define the "roles" and not the metadata
>specification.

I agree 100% with that, and I think Jahan does too based on what he's said.

Given the volume of work we're all trying to get done, I think the way we're
moving forward is to start with as complete a proposal as we can, when
that's available, and then work in the editing stage to figure out how best
to incorporate the material.

In this case, we just need to split the existing document up into new core
text that provides a framework and then the rest of the material into the
bindings and profiles. Which sounds like what you're encouraging, so I think
we're in agreement.

The point of the question about roles is simply to figure out which existing
bindings and profiles we know we need to focus on before we deliver a
working draft of the new material, since not all SAML roles are accounted
for in the ID-FF submission.

-- Scott