Re: [security-services] Groups - Kerberos Web Browser SSO Profile (sstc-saml-kerberos-browser-sso-draft-02.odt) uploaded

> Line 16 - Please change my affiliation to Oracle.

Apologies - will do.

>
> The schema file seems to be empty. Is there a schema for this Profile?

There is one; I'm not sure how it didn't get posted. I have attached  
it to this mail.

> 2. It appears that some primary authentication method other than  
> Kerberos could be used and Kerberos could be used only for Subject  
> Confirmation. It's hard to see why this would be useful unless the  
> primary authentication was stronger than Kerberos. Does anyone have  
> a specific scenario in mind around this, or is it just a technical  
> possibility?


It is a technical possibility; no specific scenario.

Many thanks, josh.