RE: [saml-dev] AttributeQuery : why SOAP binding ?

["Scott Cantor" <cantor.2@osu.edu>]

> It is now clear that the needed attributes will be dynamic...
> Why should I make an extension in AuthnRequest while the AttributeQuery
has
> all the functionalities I need...
> It seems more simple to authorize a POST binding for attributeQueries
rather
> than to extend the authnRequest !

Because it's an extra round trip, probably 4-6 extra RSA operations, and I
seriously doubt that most implementations would allow for it. Of course, the
latter is true of an extension as well at the moment.

-- Scott