Re: [wss-dev] Use of SecurityTokenReference with SAML2

[valerie.bauche@bull.net]

I was talking about section 6 of SAML Profile spec (Assertion Query/Request
Profile)
But your suggestion seems to be more simple
Thanks a lot

Valerie
----- Reply to All the Original Message -----
Author: "Tom Scavo"
To: "valerie.bauche@bull.net"
Date: 04/10/2007 16:01:14
Cc: wss-dev
Subject: Re: [wss-dev] Use of SecurityTokenReference with SAML2

> On 10/4/07, valerie.bauche@bull.net <valerie.bauche@bull.net> wrote:
> >
> > If I understand well, if I receive such a reference, I'm supposed to
send
> > a message to the URL
> > "https://saml.example.edu/assertion-authority?ID=abcde"; to get the
> > corresponding assertion.
> > But looking at SAML2 specification, I see that to ask for an assertion
> > with it's ID, we must use an AssertionIDRequest and send it with SOAP
> binding !!! So how are we supposed to handle this ?
>
> I'm not sure what part of the SAML V2.0 spec you're referring to, but
> please see section 3.7 of the SAML Bindings spec, especially the
> example in section 3.7.5.6.
>
> Hope this helps,
> Tom