RE: [saml-dev] RE: How to provide SAML assertions in RESTful services

> > I don't think the token is consumed by the issuer when you split off the
> > token issuer.
> 
> Not the issuer itself, true, but the controlling organization of both
> the issuer and the service.   So the format must be standardized
> within that domain but not a standard in the sense of an OASIS or IETF
> standard.

Until you need separate implementations to share the format...

-- Scott