On 4/20/12 11:42 AM, "Sam Hartman" <[email protected]> wrote: > >Just letting you know some thoughts going on elsewhere.
In this vein... I expect, if it goes anywhere, that SAML-EC will eventually support SAML-based delegation in the manner implemented by the Shibboleth project. I don't have the experience yet to understand how to specify that in conjunction with GSS, but it should be straightforward. I'm not expecting that Moonshot would involve a SAML request in its delegation model, but if that comes into play, it would be good to align that work. (For the record, this is done traditionally by including an Audience condition in the AuthnRquest.) -- Scott _______________________________________________ abfab mailing list [email protected] https://www.ietf.org/mailman/listinfo/abfab
