RE: [security-services] Core-08 is now available

[Scott Cantor <cantor.2@osu.edu>]

> So could I have a protocol that would give me back an artifact

An artifact isn't a protocol message in my view, but a binding-specific
"stand in" for the actual message. If you want an artifact, then you simply
use the artifact binding to solicit the message you want so that the sender
knows to give you an artifact instead of the actual message.

As an example, my AssertionConsumerService metadata endpoint might say:

<AssertionConsumerService Binding="urn:oasis:...:HTTP-Artifact"
	Location="http://xyz.com/saml/artifact"/>

That tells the IdP to use the artifact binding when he delivers the Response
to my AuthnRequest (which might be sent over a different binding).

You can also specify the ProtocolBinding in the AuthnRequest in case you
have multiple bindings supported.

-- Scott