security-services message

Subject: Possible Error in SAML 1.1 Spec

From: "Dana Kaufman" <dkaufman@forumsys.com>
To: "SAML" <security-services@lists.oasis-open.org>
Date: Thu, 4 Nov 2004 11:48:49 -0500

We noted the following possible issue in the SAML 1.1 specification:

The OASIS SAML 1.1 spec line 810 says that the <AttributeValue> element
IS NOT required in the <Attribute> element.  Note that [Any Number]
means 0 or more, indicating that the presence of <AttributeValue> is
optional.

Just eight lines later at line 818 it says that the <AttributeValue>
element IS required in the <Attribute> element.  Note that minOccurs in
the schema defaults to 1, indicating that the presence of
<AttributeValue> is mandatory.


Dana S. Kaufman
VP of Product Management
Forum Systems, Inc.
Tel: (781) 788-4232
E-Mail: dkaufman@forumsys.com
Visit http://www.forumsys.com