Robert Yates wrote:
>  SAML can only do Web Services

Incorrect -- and where did that notion come from?

The web browser SSO profile of SAML [1], employing either the SAML HTTP Redirect Binding or the HTTP POST Binding [2], are essentially RESTful, AFAIU.

JeffH

[1] SAMLv2 Profiles
http://docs.oasis-open.org/security/saml/v2.0/saml-profiles-2.0-os.pdf

[2] SAMLv2 Bindings
http://docs.oasis-open.org/security/saml/v2.0/saml-bindings-2.0-os.pdf










_______________________________________________
dix mailing list
[email protected]
https://www1.ietf.org/mailman/listinfo/dix

Reply via email to