Shibboleth Developers

["Tom Scavo" <>]

On 9/11/06, Chad la Joie 
<>
 wrote:
> We didn't discuss the layout of the message but we are moving towards a
> primarily attribute push model.  My guess, for SAML 2 at least, would be
> one assertion, two statements.

Even for pull?  I assume query is still an option...

> We have no plans to drop the ability to
> export the full assertion to the protected resource, but we also
> acknowledge that some web servers will have issues with that as they
> restrict the amount of data that may go into a header.

Would it help to strip away the response wrapper (and signature) and
expose only the assertion?  Then SPs can choose whether or not they
want signed assertions.

Tom