OpenSAML user discussion

[Xiang Yang <>]

Good hint! Thanks. I checked the saml-schema-protocol-2.0.xsd, beneath
AttributeQuery, indeed, the encryptedAttribute is not referred.

Actually I intend to (mis-)use the attribute query to carry information,
let's say, from entity A to entity B instead of querying attributes from
entity B what one normally does with the attribute query.  

在 2010-04-01四的 13:42 -0400，Scott Cantor写道：
> > I wonder if it is possible to add an encrypted attribute directly into a
> > AttributeQuery. While I can add attribute by using
> > AttributeQuery.getAttributes().add(attribute), there is not such methode
> > for encrypted attribute. Did anybody here try to do it at all?
> 
> It isn't schema valid or supported by SAML. Queries generally are back
> channel messages and SSL is used for confidentiality, in the unusual case
> that values would even be specified. But XML encryption isn't possible
> there.
> 
> Most value filtering would also occur on attribute types whose values
> themselves wouldn't tend to be sensitive information.
> 
> -- Scott
> 
>