OpenSAML user discussion

["Scott Cantor" <>]

> Relace Kerberos Ticket by SAML Assertion may not feasible. Ok, but using 
> publickey is really slow down performce of the system. And I really like
> the  security model of Kerberos with the use of symmetric key. I 
> will think about defining the format of Kerberos based on XML.

SAML has no notion of public key or anything else. If your confirmation or
HMAC key is symmetric, than there's no PKI involved.

-- Scott