Re: [saml-dev] How does an artifact issuer "authenticate" the sender of the <ArtifactResolve> message?

On 6/22/06, Costello, Roger L. <> wrote:
>
> Question: how does an artifact issuer "authenticate the sender" of the
> <ArtifactResolve> message?  There doesn't seem to be anything within an
> <ArtifactResolve> message for authentication.

Can't the requester sign the <ArtifactResolve> message?  Am I missing something?

Tom