[security-services] [A20: Prateek] - Need for additionalConfirmationMethod identifie rs

1)
 
Name: Holder Of Key

Text: An additional digital signature MUST be provided within the context of
use of the
assertion. The assertion MUST include a <ds:KeyInfo> element within the
<saml:SubjectConfirmation> element. The relying party MUST determine the
validity of the digital signature, possibly utilizing the <ds:KeyInfo>
element, before
processing the assertion.
 
 
2) Sender Vouches
 
Text: Indicates that no other information is available about the context of
use of the assertion. The relying
party SHOULD utilize other means to determine if it should process the
assertion further.