Shibboleth Developers

["Cantor, Scott E." <>]

On 6/26/11 1:44 AM, "Peter Williams" 
<>
 wrote:

>There is nothing hidden about the "profile" of WIF. Its rather informally
>specified, though.

There's no such thing as an informally specified profile in this context.

>Im reading the MSFT press book, entitled "Programming Windows Identity",
>and the author clearly gives examples of SAML tokens with no
>AuthenticationStatement and claims in an AttributeStatement. These tokens
>are passed over ws-fedp channels, though what version and what (if any)
>profile thereof I don't know, formally.

When you control both ends and are simply using toolkits to throw things
together, you can do anything you want. If the book portrays that as
anything other than that, it's misleading people.

-- Scott