RE: [security-services] Comments on Technical Overview Draft 01

["Scott Cantor" <cantor.2@osu.edu>]

> 3. Section 4.1.8, It's not well defined whether the query 
> string parameter TARGET should be used throughout (including 
> sending the Response to the SP). Vs using the RelayState 
> parameter (which is suggested in the Saml Specs). Same goes 
> for section 4.1.9.

TARGET should definitely be removed, it's historical from SAML 1.1. It's a
non-SAML parameter if it's used.

-- Scott