Shibboleth Developers

["Dharam Veer" <>]

Dear Tom,

Thanks for this clarification. I am looking at OAuth as per your suggestion and it does look interesting. I hope that it has some way to establish trust using x509 like SAML.

>> The OASIS SSTC
>> has discussed the possibility of including attributes in AuthnRequest,
>> and in fact, this is an action item waiting for someone to write the
>> profile.

Is there any public link which talks about it ?.

Best regards

On Mon, Oct 27, 2008 at 11:42 AM, Tom Scavo <> wrote:

On Mon, Oct 27, 2008 at 12:27 PM, Dharam Veer <> wrote:
>
> 1/ As part of AuthnRequest you can't specify the attributes required.
> Attribute Query/Response is the thing to use for this. [Please correct me if
> I misunderstood the spec]

You have correctly understood the current spec, yes.  The OASIS SSTC
has discussed the possibility of including attributes in AuthnRequest,
and in fact, this is an action item waiting for someone to write the
profile.  No idea when this might become concrete.

Tom