encrypted assertions

[Nate Klingenstein]

Max,

> If an implementation claims to support SAML2 but does not support 
> encrypted assertions, can that claim be completely correct?

"Support SAML 2.0" is a vague statement today because the initial normative conformance specifications weren't especially helpful in the first place and they were written a looong time ago.  It would be more meaningful to ask them about the SAML2Int work.

http://saml2int.org

> Phrasing the intent of my question another way (just in case I'm too 
> confusing for anyone,) are encrypted assertions part of the SAML protocol 
> spec?

Yes, the encryption is in there.  2.3.4.

http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf

Hope this helps,
Nate.