RE: [security-services] Proposed addition to Section 3.3 of Conformance

["Philpott, Robert" <rphilpott@rsasecurity.com>]

Proposed modifications... feel free to wordsmith further...

-------------
Conforming SAML implementations must provide facilities to permit
consumers and producers of SAML messages to support the constants
described in Sections 8.2 and 8.3. These facilities can be provided
through direct implementation support for the identifiers or through the
use of supported programmatic API's that allow the SAML implementation
to be extended in ways that adds support for the identifiers.

SAML message consumers should be able to process messages with constants
taken from Sections 8.2 and 8.3. SAML message producers must be able to
create messages with constants taken from Sections 8.2 and 8.3. Note
that sections 8.3.7 and 8.3.8 prescribe normative processing rules that
must be adhered to for persistent and transient identifiers. The
remaining identifiers in these sections do not specify normative
processing rules.

<need additional text explaining that the consent identifiers are not
MTI>
-------------

Rob.

> -----Original Message-----
> From: prateek mishra [mailto:pmishra@principalidentity.com]
> Sent: Tuesday, January 04, 2005 11:20 AM
> To: security-services@lists.oasis-open.org
> Subject: [security-services] Proposed addition to Section 3.3 of
> Conformance
> 
> Add after line 196:
> 
> SAML consumers should be able to process messages with
> constants taken from Section 8.2-8.4. SAML generators
> should be able to create messages with constants taken
> from Section 8.2-8.4. Sections 8.3.7 and 8.3.8
> prescribe normative processing rules for persistent
> and transient identifiers requiring implementation by
> conformant implementations. Sections 8.2-8.3 do not
> specify normative processing rules for any of the
> remaining identifiers. The means by which SAML
> generators obtain and record consent is outside the
> scope of the conformance document
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail:
security-services-unsubscribe@lists.oasis-open.org
> For additional commands, e-mail: security-services-help@lists.oasis-
> open.org