RE: [security-services] A browser/POST question...

From
Scott Cantor <>
Date
2003-05-01T19:08:06+00:00
ID
005801c31016$8bde1c20$38f39280@SAIDIN
Thread
RE: [security-services] A browser/POST question...
> OK, so the proposed clarification would be replace:
> 1)
> 
> Section 4.1.1.6 
> 
> The <saml:ConfirmationMethod> element of each assertion MUST 
> be set to urn:oasis:names:tc:SAML:1.0:cm:artifact-01. 
> 
> BY
> 
> The <saml:ConfirmationMethod> element of each statement in 
> each assertion MUST be set to 
> urn:oasis:names:tc:SAML:1.0:cm:artifact-01

The problem with that is that it assumes that each statement even has a subject (not a requirement, of course, though only
SubjectStatements are currently defined by SAML).

Maybe that's being overly pedantic. ;-)

-- Scott