Shibboleth Developers

[Chad La Joie <>]

Tom Scavo wrote:
> This use case distills the common requirements of various grid
> projects I've worked on, and so it might be called the "Grid Use
> Case":
>
> 1. The IdP asserts an SSO assertion with the following characteristics:
>   * The assertion is unencrypted
>   * There is a digital signature on the <Assertion> element
>   * The <AuthnContext> element distinguishes between two levels of assurance
>   * The IdP asserts a persistent, non-reassignable identifier (encrypted)
>   * The assertion may contain non-identity attributes such as ePSA 
> (unencrypted)
>
> Questions:
>
> * Can the Shib IdP 2.0 be made to issue such an assertion?

Yes.  Generally though, I imagine most people will encrypt the assertion 
if they're pushing attributes in it.

--
SWITCH
Serving Swiss Universities
--------------------------
Chad La Joie, Software Engineer, Security
Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland
phone +41 44 268 15 75, fax +41 44 268 15 68
,
 http://www.switch.ch