Re: [security-services] XPath Attribute Profile

["Conor P. Cahill" <concahill@aol.com>]

Conor P. Cahill wrote on 6/1/2005, 2:49 PM:

 > Cameron Morris wrote on 6/1/2005, 2:30 PM:
 >
 > > So you are also proposing that the attributes in a query can be xpath,
 > > and the asserted attributes follow your proposal. Correct?
 >
 > Correct.

PS.  Note that there does not *have* to be a real query involved (e.g.
the IdP can have some out-of-band knowledge that the SP would want
some data returned and can return it as if the SP had queried it).

Not that their can't be a query, just that there are situations
where there is not an explicit query and the IdP may return
such attributes in an AuthnResponse.

Conor