OpenSAML user discussion

[Mike Ferraro <>]

I'm not really trying to communicate schema info.  Sorry if that's how it came
across.  Basically, I want the client to say:

Query: What are the values of these attributes?
Name
Rank
Serial Number
Birthday

And the authority would say:

Response:
Name = Joe
Rank = #null#
Serial Number = 

Birthday is left out because either the authority doesn't recognize birthdays 
or
the client doesn't have auhtorization for that attribute.

I was just wondering how I would implement all of these cases using SAML.

-Mike

> Right, I believe I understand your use case.  It just seems like this 
> is the wrong place to "carry" this data.  I think that this 
> functionality is outside the scope of the SAML attribute query.  I'd 
> recommend a separate protocol for schema discovery.  This could be 
> implemented quite simply by just publishing a static document at a 
> well-known URL.  For a slightly better hack, you might use SAML status 
> codes or SOAP headers.
> 
> -Walter