>>>>> "Alejandro" == Alejandro Perez Mendez <[email protected]> writes:
>> Well, I think you may well need SAML rewrite at AAA proxies if
>> you don't have something like Kerberos.
>>
>> Attribute remapping at organizational boundaries seems like
>> something people will want.
Alejandro> But that does not happen at the intermediary AAA proxies,
Alejandro> as they are not interested on the information being
Alejandro> transmitted. It should happend at both ends of the
Alejandro> communication, or at a close point. And likely it will
Alejandro> happend once at much for each assertion. Am I wrong?
Right.
I don't think that core proxies need to be involved in rewrite.
_______________________________________________
abfab mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/abfab