SAML TP and AuthorizationDecisionStatements

["Maneesh Sahu" <maneesh@westbridgetech.com>]

Hi,

I had some additional questions about the SAML TP:

 

-          Are AttributeStatements the only statements pertinent to the SAML TP?

-          Are AuthenticationStatements and AuthorizationDecisionStatements useful in the WSS scenarios?

-          If AuthorizationDecisionStatements are applicable to WSS, how does one specify a fine-grained Web Services resource in the Statement? The SAML spec specifies simple HTTP endpoints. How can one specify a particular operation with a particular SOAP-Action URI at a particular endpoint as the targeted resource?

 

--ms