← Prev in month ← Prev in thread

NameID-less SAML Subject

From
Tom Scavo <>
Date
2008-02-28T14:58:47+00:00
ID
Thread
NameID-less SAML Subject
A SAML V1.1 Subject element may consist of a <SubjectConfirmation>
element alone, without a <NameIdentifier> element:

<complexType name="SubjectType">
  <choice>
    <sequence>
      <element ref="saml:NameIdentifier"/>
      <element ref="saml:SubjectConfirmation" minOccurs="0"/>
    </sequence>
    <element ref="saml:SubjectConfirmation"/>
  </choice>
</complexType>

Similarly, a SAML V2.0 Subject element may consist of one or more
<SubjectConfirmation> elements (again, without a name identifier):

<complexType name="SubjectType">
  <choice>
    <sequence>
      <choice>
        <element ref="saml:BaseID"/>
        <element ref="saml:NameID"/>
        <element ref="saml:EncryptedID"/>
      </choice>
      <element ref="saml:SubjectConfirmation" minOccurs="0"
maxOccurs="unbounded"/>
    </sequence>
    <element ref="saml:SubjectConfirmation" maxOccurs="unbounded"/>
  </choice>
</complexType>

What is a use case for this type of SAML Subject?  Can someone give a
real example of a SAML Subject without a name identifier?

Thanks,
Tom
← Prev in month ← Prev in thread