← Prev in month ← Prev in thread

SAML assertion profile in OAuth 2.0?

From
Paul Madsen <>
Date
2010-03-04T13:26:29+00:00
ID
Thread
SAML assertion profile in OAuth 2.0?
The WRAP spec [1] defines an 'assertion' profile as one means by which a 
WRAP client obtains an access token - this used for subsequent 
authentication of a service request

The premise is that a WRAP client uses the (very under defined) profile 
to trade an assertion for a WRAP token (a la WS-Trust)

As the OAuth community starts work on OAuth 2.0, David Recordon poses 
the question 'do we want to keep the SAML assertion profile?'

http://daveman692.livejournal.com/349384.html

Do we wish to argue? (one way or the other)

Paul

[1] - http://bit.ly/c21VCw [1
← Prev in month ← Prev in thread