Re: [wss] ACTION([Ron]: Propose what to do about SAML 2.0 assertionIDs.

[Ron Monzillo <Ronald.Monzillo@Sun.COM>]

Tony,

The addition to core does not profile of the use of SAML 2.0 assertions 
with WSS.
It sustains the use of direct local STR's with all versions of SAML 
(current and
future), as is consistent with the objectives of the core (i.e to be 
extensible to diverse
security tokens types).

This isssue was resolved in the TC teleconf of Nov 4, at which time the
text was reviewed and accepted for inclusion.

Ron

Anthony Nadalin wrote:

> Ron,
>
> 2.0 is not final yet and I don't believe that anyone has tested the 
> SAML Token Profile with SAML 2.0 implementation, so pending the 
> completion of these 2 item I'm not for adding this to core yet. May 
> want to talk about this tomorrow.
>
> Anthony Nadalin | Work 512.838.0085 | Cell 512.289.4122
> Ron Monzillo <Ronald.Monzillo@Sun.COM>
>
>
>                         Ron Monzillo <Ronald.Monzillo@Sun.COM>
>
>                         11/02/2004 08:29 AM
>
> 	
>
> To
> 	
> "'wss@lists.oasis-open.org'" <wss@lists.oasis-open.org>
>
> cc
> 	
>
> Subject
> 	
> [wss] ACTION([Ron]: Propose what to do about SAML 2.0 assertion IDs.
>
> 	
>
>
> wrt issue 334, I brought this up in the SS TC  treleconf.
>
> I asked if the SS TC  would consider reverting the name (ID) of saml 2.0
> assertion identifiers back to the name (AssertionID) used for 1.0
> and 1.1 assertion identifiers.
>
> I learned that the attributes are in different name spaces, and as
> such even if they had the same relative name, they would be different
> attributes.
>
> Thus our poposed resolution to issue 334, that is, adding AssertionID
> to the WSS core as a direct ID reference mechanism, would not be 
> sufficient
> to sustain local direct references to SAML 2.0 Assertions.
>
> To sustain local direct references to SAML 2.0 Assertions, we would 
> have to
> permit the use of the saml v2.0 ID attribute in local direct references.
>
> I recommend that we add both attributes to the WSS core as
> permitted/supported
> attributes in local direct references.
>
> Ron
>
>
> To unsubscribe from this mailing list (and be removed from the roster 
> of the OASIS TC), go to 
> http://www.oasis-open.org/apps/org/workgroup/wss/members/leave_workgroup.php.
>
>