Re: [wss-dev] Use of SecurityTokenReference with SAML2

["Tom Scavo" <trscavo@gmail.com>]

On 10/4/07, valerie.bauche@bull.net <valerie.bauche@bull.net> wrote:
>
> If I understand well, if I receive such a reference, I'm supposed to send
> a message to the URL
> "https://saml.example.edu/assertion-authority?ID=abcde"; to get the
> corresponding assertion.
> But looking at SAML2 specification, I see that to ask for an assertion
> with it's ID, we must use an AssertionIDRequest and send it with SOAP binding !!! So how are we supposed to handle this ?

I'm not sure what part of the SAML V2.0 spec you're referring to, but
please see section 3.7 of the SAML Bindings spec, especially the
example in section 3.7.5.6.

Hope this helps,
Tom