Other SP's transient ID in attribute query

Takeshi NISHIMURA takeshi at nii.ac.jp
Tue Nov 8 01:54:27 GMT 2011

Hi all,

From my understanding, attribute query from an SP makes use of the transient ID (session ID) to retrieve attributes of the user tied with the ID.

I wonder if another SP can retrieve his attributes from the same IdP using the same transient ID.
Of course it should be done in a short period because of the expiration of transient ID.

Is this possible / allowed?


More information about the users mailing list