Tom Scavo wrote on 2009-05-19:
> Add a <saml:NameID> element to the <saml:SubjectConfirmation> element,
> you mean? This is useful in cases where the presenter is not the
> attesting entity. The Shib-uPortal use case is one such example, I
> think:
>
> https://spaces.internet2.edu/display/ShibuPortal/Home
It is, though in retrospect the need to signal more strongly that delegation
is happening led to my proposal for a condition rather than the very limited
approach of an optional element without any mandatory processing rules.
For situations where the possibility of delegation is just a given, using
the confirmation might be ok.
> Scott requested that this requirement be included in the profile, so
> I'm sure he can provide more detail.
If I said something, I don't recall it, but the basic definition there is
just what's in core anyway, it's not unique to this profile. It's
confirmation method agnostic.
-- Scott
