Shibboleth Developers

["Tom Scavo" <>]

What will a typical authn response look like in Shib 2.0?  Will the
payload still be two separate assertions or are you considering one
assertion with two statements?

Assuming the authentication response contains two separate assertions,
will the Shib 2.0 SP continue to expose the complete response?

I missed the discussion of the SP at the F2F so I apologize in advance
if the following topic was covered.  Instead of exposing the response
at the SP, why not expose the attribute assertion only (with the
response wrapper stripped away)?  In that case, you end up with the
same thing irrespective of push or pull.

Also, why not nest the authentication assertion in the <Advice>
element of the attribute assertion?  This exposes the authentication
context in its entirety and leaves it up to the consuming application
to make use of it or not, as the case may be.

Tom