> I agree that we do not want to define new mechanisms. I was more thinking
> that if a DSS server required to use one of the existing authentication
> mechanisms (kerberos, SAML, Liberty ...) for authenticating it users which
> is stronger what is generally required for user login to web services this
> can be supported.
I can totally buy into that. We just need to fix the schema so the type
isn't string, but is instead ##any
/r$
--
Rich Salz Chief Security Architect
DataPower Technology http://www.datapower.com
XS40 XML Security Gateway http://www.datapower.com/products/xs40.html
XML Security Overview http://www.datapower.com/xmldev/xmlsecurity.html
