Shibboleth Developers

["RL 'Bob' Morgan" <>]

> It should (and probably can) be done in an assertion-centric manner, so 
> it would work in any of the protocols that carry them.
>
> Obviously if it's just an attribute, there's no issue. If there are
> additional protections needed or desired, that might be SAML version
> specific.

OK, added as desirable:

 Work in many SAML-assertion-carrying protocol scenarios:  SAML 2.0, SAML
 1.1, WS-Federation, Information Cards.

 - RL "Bob"