Multiple Assertions

[Cantor, Scott]

On 12/10/13, 11:16 AM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

>On 12/10/13, 11:12 AM, "vyal2k" <vyal2k at yahoo.com> wrote:
>
>>Hi,
>> In what scenario would an IdP's authentication response contain multiple
>>Assertion's?
>>In such a scenario (multiple Assertions from IdP), how can SP determine
>>which Assertion to use?
>
>If you have general SAML questions, this isn't the list for that. OASIS
>has a saml-dev list for discussing such issues.

But in the specific case of Shibboleth, the SP uses the first assertion
with an authentication statement that contains an acceptable confirmation
method and processes the rest for attribute statements if they conform to
the profile.

-- Scott