OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

security-services message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: Re: [security-services] Groups - sstc-saml-holder-of-key-browser-sso-draft-03.odt (sstc-saml-holder-of-key-browser-sso-draft-03.odt) uploaded

On Tue, Jul 1, 2008 at 10:00 PM, Scott Cantor <cantor.2@osu.edu> wrote:
> There are two halves to the profile you're talking about, and the IdP-first
> case is *similar* (but not the same) as one of those halves for delivering
> an assertion to an HTTP server. That half leaves out the part where you
> figure out what the site actually wants and get the token in the first
> place. That end to end flow is what causes the problems, and this profile is
> end to end right now.
> Having written both types of profiles, I know that it's not a subset, and I
> also know that the first half of such a profile already exists and is
> perfectly usable, even if it's not in OASIS.

Scott, can you provide pointers to the profile (or profiles) you're
referring to?


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]