SAML supports a couple of SAML assertion reference formats, wherein
assertions are passed by reference.
One format is the artifact, which can be carried by a
<saml:artifact>thisisanartifact<saml:artifact> element
Another possibility is the SAML URI binding which supports references of
the form (abcde is a SAML id)
GET https:example.com/SamlService?ID=abcde HTTP/1.1
My question is whether there is value in supporting these reference
formats in the profile in place of a (verbose) SAML assertion..
- prateek
_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth
