[security-services] Issue: conform-spec-11 test cases regardingartifact handling

["Eve L. Maler" <eve.maler@sun.com>]

Emily Xu just posed the following question to me.  I suspect the test cases 
go too far in having these requirements.  Is that correct?

>According to Test Case 1-2, 1-3, 1-6, 1-10 in the conformance spec 11, a SAML
>Request is sent over SOAP protocol binding to a responder. The responder 
>should
>be able to return an assertion artifact in the Response. The requester then
>request the assertion using the artifact.
>
>The key here is an artifact is requested for ANY type of assertion AND 
>over SOAP
>protocol binding. I don't see these requirement anywhere else, not even in 
>Table
>1: Protocol Bindings and Profiles for SAML Assertions. Are they intended or
>should be removed?

         Eve
--
Eve Maler                                    +1 781 442 3190
Sun Microsystems XML Technology Center   eve.maler @ sun.com