> OK, so the proposed clarification would be replace:
> 1)
>
> Section 4.1.1.6
>
> The <saml:ConfirmationMethod> element of each assertion MUST
> be set to urn:oasis:names:tc:SAML:1.0:cm:artifact-01.
>
> BY
>
> The <saml:ConfirmationMethod> element of each statement in
> each assertion MUST be set to
> urn:oasis:names:tc:SAML:1.0:cm:artifact-01
The problem with that is that it assumes that each statement even has a subject (not a requirement, of course, though only
SubjectStatements are currently defined by SAML).
Maybe that's being overly pedantic. ;-)
-- Scott