Authentication with SAML2 assertion only

[Cantor, Scott]

On 8/19/14, 11:04 AM, "Tom Scavo" <trscavo at gmail.com> wrote:
>
>I don't know what bursting is but a quick read of the above document
>suggests we're probably not talking about SAML here (let alone
>Shibboleth). SAML Web Browser SSO assumes the presence of a user who
>transmits SAML messages between IdP and SP via the browser. SPs do not
>transmit SAML messages to other SPs (as indicated in Figure 2) unless
>you're thinking that the ACME thingy in the middle is an IdP Proxy
>(with both SP and IdP capabilities).

Or it's a delegation problem.

-- Scott