I also don't think there's much value to it. Practically relative to the additional complexity it'd bring along for the ride.
On Wed, Mar 13, 2013 at 4:17 PM, John Bradley <ve7...@ve7jtb.com> wrote: > It is a direct connection and not a browser redirect. I don't think there > is much value in supporting something like artifact. > > On 2013-03-13, at 4:13 PM, prateek mishra <prateek.mis...@oracle.com> > wrote: > > > SAML supports a couple of SAML assertion reference formats, wherein > assertions are passed by reference. > > > > One format is the artifact, which can be carried by a > <saml:artifact>thisisanartifact<saml:artifact> element > > > > Another possibility is the SAML URI binding which supports references of > the form (abcde is a SAML id) > > > > GET https:example.com/SamlService?ID=abcde HTTP/1.1 > > > > My question is whether there is value in supporting these reference > formats in the profile in place of a (verbose) SAML assertion.. > > > > - prateek > > _______________________________________________ > > OAuth mailing list > > OAuth@ietf.org > > https://www.ietf.org/mailman/listinfo/oauth > > > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth > >
_______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth
