Re: [security-services] Some questions about saml assurance profile

[Nate Klingenstein <ndk@internet2.edu>]

Juan,

Yes, i know. But where can i get the latest file?

Try here first:

https://wiki.oasis-open.org/security

That will lead you to:

http://docs.oasis-open.org/security/saml/Post2.0/sstc-saml-assurance-profile-cs-01.pdf

yeah, maybe assurance is not a good concept. But, I think the truth of attribute is required for services. For example, the truth level of attribute(s) that SP requires for a bank transaction typically is different from that for a social network. 

That's true.  However, people have mostly spoken about the assurance of an authentication transaction as a whole, including the attributes retrieved as part of it.  Assurance of individual attributes is a much harder goal in a real deployment.

Thanks for your interest in SAML,

Nate.