Base64 image in SAML assertion

[Cantor, Scott]

On 8/28/13 8:20 PM, "MikeWho" <who at me.com> wrote:
>
>We were considering using that approach for entirely separate reasons (IdP
>is sending SessionNotOnOrAfter field, but client wants us to maintain
>session beyond that), it hadn't occurred to me that it would also solve
>this
>problem of 'big headers'.

Well, it won't really. If it's too big, it's too big. Whether you get a
500 error because of one request or many, it still won't work.

-- Scott