Re: [security-services] Drafts for review: Kerberos & SAML profiles

[Josh Howlett <josh.howlett@gmail.com>]

> Ok, personally I'm satisfied that a new Subject Confirmation method  
> that uses this structure to encode a Kerberos principal name is a  
> defensible approach for my use-cases (Web SSO & WSS). Unless I hear  
> any advice to the contrary, I will propose a strawman for discussion  
> shortly.

Alternatively, the new Kerberos <SubjectConfirmation> method could  
simply give a <NameID> having a Kerberos Principal Name identifier  
format (section 8.3.5 SAMLCore). This seems most parsimonious.

josh.