RE: [saml-dev] empty assertions

> If you know right offhand, could you give me a hint as to which of the
> many WSF documents to look at?

Should be in Security Mechanisms Core, or possibly the SAML Security
Mechanism profile.

I think Advice is also used to carry an extra SAML token used for discovery
lookup, if the SSO assertion isn't suitable, but I'm not sure. That would be
in Disco.

-- Scott