SAML authority

Hello everybody,

although it might be a bit out of scope for SAML, I'd like to know how a SAML authority can gain information needed for creating assertions. Can it communicate for example with an LDAP directory?
And how can it determine whether a subject has been authenticated to an SP?

Does anybody have experience with that or do you know any other mailing list that supports questions about authentication and authorization systems?


Regards,

Manuel Ernstberger
-- 
"Feel free" - 10 GB Mailbox, 100 FreeSMS/Monat ...
Jetzt GMX TopMail testen: http://www.gmx.net/de/go/topmail