Hi,
I must be honest at the moment I'm only trying to understand SAML and
its security model,
trying to understand capabilities and alternatives.
I don't want just yet look into solutions or necessarily conformance.
That's why I am evaluating alternatives.
On the other side though I also (to build confidence) , and I thank you
guys for this, want to understand how other people have used this or
intend to use and which are the market trends.
Thanks.
Giuseppe.
-----Original Message-----
From: w i l l [mailto:]
Sent: 08 December 2005 16:15
To: ; Sarno, Giuseppe [MOP:GM15:EXCH];
Subject: RE: [saml-dev] SAML, trust and WS.
how important to you is conformance? of course you could implement
some proprietary, non-conformant mechanism that allows your web
service client (your "Resource A" on "SPA") to exchange the SPA
SSO assertion for a ws-security assertion. no?
On Thu Dec 08 07:50:15 PST 2005, w i l l
<> wrote:
> in a nutshell you can take either a liberty approach:
> http://www.projectliberty.org/specs/draft-liberty-idwsf-guidelines-v1.
> 0-12.pdf
>
> or you can take a ws-* approach:
> ftp://www6.software.ibm.com/software/developer/library/ws-trust.pdf
>
>
>
> ---------------------------------------------------------------------
> This publicly archived list supports open discussion on
> implementing the SAML OASIS Standard. To minimize spam in the
> archives, you must subscribe before posting.
>
> [Un]Subscribe/change address: http://www.oasis-open.org/mlmanage/
> Alternately, using email: list-[un]
> List archives: http://lists.oasis-open.org/archives/saml-dev/
> Committee homepage:
> http://www.oasis-open.org/committees/security/
> List Guidelines:
> http://www.oasis-open.org/maillists/guidelines.php
> Join OASIS: http://www.oasis-open.org/join/
