RE: Comments on draft-sstc-solution-profile-kerberos-01.pdf

[Scott Cantor <cantor.2@osu.edu>]

> In any case the proposal also suggests that the SAML protocol is extended
so
> that distinct messages are supported to request an Assertion - or an
> Artifact reference

Yes, and to the extent that I'm "objecting", which is a little strong,
that's what I'm objecting to. We wouldn't be likely to do this in the case
of the browser-based AuthnRequest, so I don't see how it applies here
either. I'm trying to suggest that they are the same use case leading to the
same result, a bearer assertion. Just different protocol bindings for SAML.

-- Scott