<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<div class="moz-cite-prefix">On 2/7/13 4:35 PM, Mike Flynn wrote:<br>
</div>
<blockquote
cite="mid:1360272945.70118.YahooMailNeo@web163506.mail.gq1.yahoo.com"
type="cite">
<div style="color:#000; background-color:#fff; font-family:arial,
helvetica, sans-serif;font-size:12pt">
<div><span>This is what was sent:</span></div>
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family:
arial, helvetica, sans-serif; background-color: transparent;
font-style: normal;"><span><br>
</span></div>
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family:
arial, helvetica, sans-serif; background-color: transparent;
font-style: normal;"><span>
<div class="MsoNormal" style="color: rgb(34, 34, 34);
font-family: arial, sans-serif; font-size: 13px;"><span
style="font-size: 10pt; font-family: 'Courier New';
color: blue;"><</span><span style="font-size: 10pt;
font-family: 'Courier New'; color: rgb(163, 21, 21);">saml:SubjectConfirmation</span><span
style="font-size: 10pt; font-family: 'Courier New';
color: blue;"> </span><span style="font-size: 10pt;
font-family: 'Courier New'; color: red;">Method</span><span
style="font-size: 10pt; font-family: 'Courier New';
color: blue;">=</span><span style="font-size: 10pt;
font-family: 'Courier New';">"<span style="color: blue;">urn:oasis:names:tc:<wbr>SAML:2.0:cm:holder-of-key</span>"<span
style="color: blue;">></span></span></div>
<div class="MsoNormal" style="color: rgb(34, 34, 34);
font-family: arial, sans-serif; font-size: 13px;"><span
style="font-size: 10pt; font-family: 'Courier New';
color: blue;"> <</span><span style="font-size:
10pt; font-family: 'Courier New'; color: rgb(163, 21,
21);">saml:SubjectConfirmation</span><span
style="font-size: 10pt; font-family: 'Courier New';
color: blue;"> </span><span style="font-size: 10pt;
font-family: 'Courier New'; color: red;">Method</span><span
style="font-size: 10pt; font-family: 'Courier New';
color: blue;">=</span><span style="font-size: 10pt;
font-family: 'Courier New';">"<span style="color: blue;">urn:oasis:names:tc:<wbr>SAML:2.0:cm:bearer</span>"<span
style="color: blue;">></span></span></div>
<div class="MsoNormal" style="color: rgb(34, 34, 34);
font-family: arial, sans-serif; font-size: 13px;"><span
style="font-size: 10pt; font-family: 'Courier New';
color: blue;"> <</span><span
style="font-size: 10pt; font-family: 'Courier New';
color: rgb(163, 21, 21);">saml:SubjectConfirmationData</span><span
style="font-size: 10pt; font-family: 'Courier New';
color: blue;"> </span><span style="font-size: 10pt;
font-family: 'Courier New'; color: red;">NotOnOrAfter</span><span
style="font-size: 10pt; font-family: 'Courier New';
color: blue;">=</span><span style="font-size: 10pt;
font-family: 'Courier New';">""<span style="color:
blue;"> </span><span style="color: red;">Recipient</span><span
style="color: blue;">=</span>"<span style="color:
blue;"><a moz-do-not-send="true"
href="https://shib.lynda.com/Shibboleth.sso/SAML2/POST"
target="_blank" style="color: rgb(17, 85, 204);">https://shib.lynda.<wbr>com/Shibboleth.sso/SAML2/POST</a></span>"<span
style="color: blue;"><wbr>/></span></span></div>
<div class="MsoNormal" style="color: rgb(34, 34, 34);
font-family: arial, sans-serif; font-size: 13px;"><span
style="font-size: 10pt; font-family: 'Courier New';
color: blue;"> </</span><span style="font-size:
10pt; font-family: 'Courier New'; color: rgb(163, 21,
21);">saml:SubjectConfirmation</span><span
style="font-size: 10pt; font-family: 'Courier New';
color: blue;">></span></div>
<div class="MsoNormal" style="color: rgb(34, 34, 34);
font-family: arial, sans-serif; font-size: 13px;"><span
style="font-size: 10pt; font-family: 'Courier New';
color: blue;"></</span><span style="font-size: 10pt;
font-family: 'Courier New'; color: rgb(163, 21, 21);">saml:SubjectConfirmation</span><span
style="font-size: 10pt; font-family: 'Courier New';
color: blue;">></span></div>
</span></div>
<div><br>
</div>
</div>
</blockquote>
<br>
<br>
Well, that's just completely bogus, it's not even legal SAML. It
has bearer SubjectConfirmation wrapped in a holder-of-key one, which
I *think* is schema invalid. And certainly logically doesn't make
any sense. <br>
<br>
To put it mildly, it sounds like they, um, have some work to do on
their SAML implementation...<br>
<br>
<br>
</body>
</html>