SubjectLocality/Address & SubjectConfirmationData/Address

[Paul Madsen <paulmadsen@rogers.com>]

Is there a difference between the purpose and/or usage of the two?

The semantics seem to be that SubjectLocality is the IP address from 
which the subject authenticated to the IdP, and SubjectConfirmationData 
the address from which the Subject can present the Assertion to the RP.

Presumably they'd be the same? Unless the Assertion is long-lived?

paul

-- 
Paul Madsen             e:paulmadsen @ ntt-at.com
NTT                     p:613-482-0432
                        m:613-282-8647
                        aim:PaulMdsn5
                        web:connectid.blogspot.com