> Hi when you say reasobly clean in SAML 2.0,
> do you mean Liberty based on SAML 2.0 ?
have you considered ws-trust | ws-secureconversation? i was
leaning toward liberty myself initially. but the ws-* stack struck
me as maybe just a little bit more intuitive to implement compared
to liberty (to my way of thinking anyway). and since they are now
officially sanctioned by oasis, they're definately worth
considering:
http://webservices.xml.com/pub/a/ws/2003/06/24/ws-trust.html?page=1
http://www.oasis-open.org/news/oasis_news_10_26_05.php
http://www-128.ibm.com/developerworks/library/specification/ws-trust/