Shibboleth Developers

["Scott Cantor" <>]

> What about holder-of-key (as in LionShare)?  Are you going to address
> that in the protocol spec?

No, because Shibboleth doesn't use it. The document has been clear that
implementing the SAML bits for Shibboleth doesn't require supporting the
other confirmation methods on either end, but to be strictly correct, the AA
is supposed to notice if somebody asks for one it doesn't support and reject
it.

-- Scott