Shibboleth Developers

[Tom Scavo <>]

document: draft-mace-shibboleth-arch-protocols-09

[lines 511--512] Replace this sentence with "If the requesting entity
is a service provider, the Resource attribute of the
<samlp:AttributeQuery> element MUST contain the service provider's
unique identifier."

[lines 537--539] Replace this sentence with "If the requesting entity
is a service provider, any assertions returned by the identity
provider SHOULD contain a <saml:AudienceRestrictionCondition> element
containing a <saml:Audience> element whose value is the service
provider's unique identifier."

[line 598] The URI mentioned here should also be mentioned in sections
3.4.5 and 3.4.6 in conjunction with the <md:RequestedAttribute>
element.

Comments/Questions:

- In section 3.2.2, what should be the value of the Resource attribute
if the requesting entity is not a service provider?

- In section 3.2.2, what are the requirements (if any) with respect to
<saml:AttributeDesignator> elements?  Is there a specified
relationship between the <saml:AttributeDesignator> elements and any
<md:RequestedAttribute> elements listed in metadata?

- In section 3.2.3, what should be the value of the <saml:Audience>
element if the requesting entity is not a service provider?