On Thu, Sep 27, 2012 at 1:28 PM, Ian Young <> wrote:
>
> On 25 Sep 2012, at 17:24, Tom Scavo <> wrote:
>
>> The real value of a JSON metadata spec will be felt at the federation
>> level. With such a spec, existing SAML federations could more easily
>> incorporate non-SAML roles and endpoints into federation metadata and
>> likewise more easily distribute federation metadata to non-SAML
>> entities.
>
> Can you give a quick explanation as to why you think that JSON is more extensible than XML in this space? The SAML metadata standard has a pretty robust extension mechanism already, after all.
That's true, SAML metadata is completely extensible in this regard, I
didn't mean to imply otherwise. My point is, if SAML federations are
to interfederate with non-SAML federations (built around OAuth2,
specifically), XML metadata is not going to cut the mustard.
Tom
