So, in a side conversation, Scott, Josh and I have been discussing the
SAML request that goes from S to TAC and thus to C's IDP. During that
discussion I realized that I don't have a clear idea of what we're using
the SAML request to accomplish.
Here's what I think we need out of the SAML request. I think it
provides a place for S to indicate what attributes it needs. First, is
this correct? Secondly, is there anything else that our particular use
cases get out of a SAML request?
--Sam
|