On Wed, Nov 11, 2009 at 5:52 PM, Scott Cantor <> wrote:
> Solberg Andreas 儼re wrote on 2009-11-11:
>> Hi Josh! You're right, this is specified in core-3.3.4 - the Subjects MUST
>> strongly match. That said, given the description in 3.3.4 two subjects may
>> apparently strongly match even if a NameID is not included in one and is
>> included in the other.
>
> I'm not sure how you're getting that conclusion, but no, that's not the
> case.
As far as I understand his comment, Andreas is correct. S1 can have
any NameID whatsoever, as long as it has every NameID that S2 has.
Tom
