Shibboleth Developers

[Scott Cantor <>]

> So you're staying instead of this or xacml we should be
> using saml? 

I'm saying I expected to use SAML metadata for publishing the list of
attributes that a service provider wants, because that's in scope for SAML
metadata to address, and it contains most of the other related information
about a service.

I never equated this set of requirements with access control, which is a
distinct function in my mind.

-- Scott