Encode XML-data as an attribute

[Rickard Bellgrim]

> That would definitely be a misuse of SAML attribute queries (mainly because
> of the injection of the notion of an "object"). There was a hacky feature in
> SAML 1.1 that sort of fit this idea, but it was removed in 2.0.
> 
> If it's not expected that anything but the custom code in the application
> would be handling the result, then yes, it's not as big a deal. I was advising as
> to interop.

Thank you for your help. I have been discussing the issues with this kind of setup with the project group and the conclusion is to simply the AA-service by only requiring the subject and to have it return an attribute containing the objects it can interact with. Some of those values will contain extra information if the interaction needs to be approved by another specific subject. The query can now also be handled directly without moving up one layer from SAML to the application.

// Rickard