attributeexchange: where to add the receiver

["Christoph Riesenberger" <christoph.riesenberger@aon.at>]

Hi,

I am working on an attribute exchange of 2 providers about a user. The
"serviceprovider" sends an attributequery to the "identityprovider".
The identityprovider checks, if the serviceprovider is allowed to get the
attributes and sends back an attributestatement. But how does he know where
to send it back, if there is no providerid oder url of the serviceprovider
intended in an attributequery?

Is there a way where to add this information in a SAML query?

Thanks,
Chris
--
PGP Fingerprint: 633B 47E1 B4AE 6184 2C83  E3DA B800 7BDD 038C 9060