after the SOAP attribute query

[David Bantz]

If that was a good start to your Friday, you’ll appreciate the next leg of the 
interaction.  The app that enables users to actually spend their banked $ on a coffee 
or burger solicits the user's institutional credentials directly, then impersonates 
that user in an SSO request to the IdP; the attributes released provide 
enough information to draw funds from the user’s account.

db


On Oct 24, 2014, at 5:54, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 10/24/14, 1:53 AM, "db at alaska.edu" <dabantz at alaska.edu> wrote:
> 
>> PCI
> 
> Thanks, that's a good way to start a Friday (totally serious about that, I
> love hearing that kind of thing).
> 
> -- Scott
> 
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net