Re: [security-services] Groups - saml-session-token-v1.0-wd06.pdfuploaded

>"Do you know why they've limited themselves to passing by cookie?  I'd
>think you'd want to be able to pass a reference in a header var (but
>haven't tried to think it through)." ,..was from Bill Young, our
>Architect on this application.

Because a browser is the software that would have to send the header.

-- Scott