Extensibility of SAML 2 metadata

[Tom Scavo]

On Wed, Jun 20, 2012 at 8:10 AM, Keith Hazelton <hazelton at wisc.edu> wrote:
>
> The Bamboo use case is not about browser-facing SSL/TLS, but about one entity performing client AuthN when accessing another.

Ah, so now we're getting down to brass tacks. Yes, such certificates
are included in metadata. See the Key Usage topic in the spaces wiki
(https://spaces.internet2.edu/x/_YuKAQ).

> I will note that this scenario is not SAML related, so maybe the answer is it doesn't belong in SAML metadata, extensions or not.

It *is* SAML-related. Back-channel exchanges (artifact resolution and
attribute query, e.g.) are examples.

Tom

Tom