Shibboleth Developers

[Walter Hoehn <>]

I haven't really gone on the record as to which of these models I  
think is better, and I'm not yet ready to.  What is clear, I think,  
is that "Artifact + attribute query" doesn't make much sense in  
standard configurations.

-Walter


On Apr 27, 2006, at 4:58 PM, Velpi wrote:

> *POST+pull=AuthN assertion through browser, attributes pulled w/  
> backchannel
> *POST+push=assertion+attributes through browser (signed)
> (*Artifact+pull: probably only useful in some specific cases)
> *Artifact+push=Artifact is dereferenced through backchannel,  
> response contains assertion+attributes in the same request/response
>
> We prefer Artifact+push (at the present time).