Shibboleth Developers

[Chad la Joie <>]

Tom Scavo wrote:
> > We have no plans to drop the ability to
> > export the full assertion to the protected resource, but we also
> > acknowledge that some web servers will have issues with that as they
> > restrict the amount of data that may go into a header.
>
> Would it help to strip away the response wrapper (and signature) and
> expose only the assertion?  Then SPs can choose whether or not they
> want signed assertions.

We discussed various ways of shrinking the size of it, stripping out all 
signatures, and some others.  I don't remember them all off the top of 
my head.
--
Chad La Joie             2052-C Harris Bldg
OIS-Middleware           202.687.0124