Protocol extensions discussion -Shib or SAML first?

[Cantor, Scott]

On 10/31/15, 4:48 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:



>Just query for some attribute representing the list of keys, and then you don't need anything more than a simple attribute query. No new spec.

Also, if you weren't aware, you can already filter queries in SAML. If you didn't want to reveal all of the keys belonging to the subject, you could just provide the key to check in the query and the result would only contain that key (or nothing).

-- Scott