Base64 image in SAML assertion

[Cantor, Scott]

On 8/28/13 3:23 PM, "MikeWho" <who at me.com> wrote:

>Am I right in thinking all attributes received in the SAML assertion (and
>mapped in the attribute map) will ultimately be sent as headers in all
>requests to the site? And thus, a Base64 encoded image in an attribute in
>the assertion would be sent in the headers of every request?

Yes. Images are not really the use case for which the design is targeted.

Acessing the assertion using the exporting feature, though complex, is
probably the only way to do that.

-- Scott