Re: [saml-dev] Is my English description of an Authentication Assertion correct?

On 5/8/06, Costello, Roger L. <> wrote:
>
> I, http://www.AirlineInc.com, assert that I authenticated this Subject
> (which I identify by email address): 

Strictly speaking, the *format* of the NameID is that of an e-mail
address (according to RFC 2822).  The spec does not say the identifier
must be a resolvable e-mail address (which the above seems to imply).

Tom