Other SP's transient ID in attribute query
takeshi at nii.ac.jp
Tue Nov 8 01:54:27 GMT 2011
From my understanding, attribute query from an SP makes use of the transient ID (session ID) to retrieve attributes of the user tied with the ID.
I wonder if another SP can retrieve his attributes from the same IdP using the same transient ID.
Of course it should be done in a short period because of the expiration of transient ID.
Is this possible / allowed?
More information about the users