I also don't think there's much value to it. Practically relative to the additional complexity it'd bring along for the ride.
On Wed, Mar 13, 2013 at 4:17 PM, John Bradley <[email protected]> wrote: > It is a direct connection and not a browser redirect. I don't think there > is much value in supporting something like artifact. > > On 2013-03-13, at 4:13 PM, prateek mishra <[email protected]> > wrote: > > > SAML supports a couple of SAML assertion reference formats, wherein > assertions are passed by reference. > > > > One format is the artifact, which can be carried by a > <saml:artifact>thisisanartifact<saml:artifact> element > > > > Another possibility is the SAML URI binding which supports references of > the form (abcde is a SAML id) > > > > GET https:example.com/SamlService?ID=abcde HTTP/1.1 > > > > My question is whether there is value in supporting these reference > formats in the profile in place of a (verbose) SAML assertion.. > > > > - prateek > > _______________________________________________ > > OAuth mailing list > > [email protected] > > https://www.ietf.org/mailman/listinfo/oauth > > > _______________________________________________ > OAuth mailing list > [email protected] > https://www.ietf.org/mailman/listinfo/oauth > >
_______________________________________________ OAuth mailing list [email protected] https://www.ietf.org/mailman/listinfo/oauth
