Shibboleth Developers

["Scott Cantor" <>]

> Or maybe artifact and dereferencing would be nicer for a PAM/JAAS module 
> (probably more complex though).

Artifacts in SAML 2.0 are about protocols, not assertions. You have to
design a protocol and define who's making what request and who's responding
to who, and then you plug an artifact in to pass one or both messages by
reference.

If you focus on assertions, then you're not talking artifacts, but a URI
reference to retrieve the assertion may suffice in place of an artifact.

-- Scott