> Your comments indicate that you are approaching SAML in terms
> of its broadest goals and philosophies. All of which is good
> and entirely appropriate
> BUT you should also be aware that SAML also includes detailed
> solutions to specific problems such as single sign-on.
To follow this up, the broader point is that "SAML" doesn't solve a
problem, "SAML Profiles" do. The SAML messages are just a framework for
carrying certain types of data around in a security-technology-neutral
way.
It would not be a "mistake" to invent a SAML profile to solve a new
security problem. It would be (IMHO) more of a mistake to reinvent the
formats and carry the same data around in XML with a different schema
without a good reason.
-- Scott
