RE: [security-services] SAML enhancement proposal for attribute assurance

["Scott Cantor" <cantor.2@osu.edu>]

> I kindly request your feedback on this approach and would be happy  to
> discuss this proposal in one of the upcoming SSTC Conference Calls.

Strictly speaking schematically, what you're proposing in the slides isn't
legal, there's no way to add elements to <saml:Attribute>.

You can add XML attributes to it, so my guess is a reasonable thought would
be to just assume that most use cases would be satisfied by URI-based
identification of an attribute assurance profile, and just use an extension
attribute for that URI inside the <saml:Attribute> element.

Adding a complete XML fragment would be difficult to pull off except inside
the <saml:AttributeValue>

-- Scott