Re: [security-services] On allowing multiple value types for an attribute

On 11/26/14, 3:19 AM, "Mohammad Jafari" <> wrote:
>I checked the specs and it seems that although saml:Subject is optional, 
>it is mandatory when saml:AttributeStatement is present.

In what specs? Certainly not in SAML 2.0, unless I'm misremembering. Even 
where Subject might be present, NameID is always optional anyway.

-- Scott