OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

security-services message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: RE: [security-services] SubjectLocality/Address & SubjectConfirmationData/Address


> Is there a difference between the purpose and/or usage of the two?

Yes.

> The semantics seem to be that SubjectLocality is the IP address from
> which the subject authenticated to the IdP, and SubjectConfirmationData
> the address from which the Subject can present the Assertion to the RP.

Yes. Two different things.

> Presumably they'd be the same? Unless the Assertion is long-lived?

Depends on the use case. In SSO they would be the same.

-- Scott




[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]