Re: [security-services] Some questions about saml assurance profile

["Cantor, Scott" <cantor.2@osu.edu>]

On 3/20/14, 11:40 PM, "chenjianyonglab@163.com" <chenjianyonglab@163.com>
wrote:

>Yes, i know. But where can i get the latest file?

https://wiki.oasis-open.org/security/

>yeah, maybe assurance is not a good concept. But, I think the truth of
>attribute is required for services. For example, the truth level of
>attribute(s) that SP requires for a bank transaction typically is
>different from that for a social network.

And I think that applications assume truth. Either you accept an attribute
or you don't. I don't see any reason to think this decision will happen
dynamically, and it hasn't happened that way anywhere that I know of.

-- Scott