It's unfortunate that ArtifactRequest does sound like a request to obtain an
artifact. But it's consistent with the other requests and queries in that
regard. i.e. an AttributeQuery is a query for an assertion with a specified
attribute or set of attributes. An ArtifactRequest is a request for an
assertion associated with the specified artifact.
At least we don't have a method such as in WS-Trust which uses both
"request" and "response" in an element name. It defines a
<RequestSecurityTokenResponse> message... now is that a "response to a
request" or a "request to obtain a response" or ...? :-0
Rob Philpott
Senior Consulting Engineer
RSA Security Inc.
Tel: 781-515-7115
Mobile: 617-510-0893
Fax: 781-515-7020
mailto:
> -----Original Message-----
> From: Scott Cantor [mailto:]
> Sent: Tuesday, March 16, 2004 9:34 AM
> To: 'John Hughes';
> Subject: RE: [security-services] Core-08 is now available
>
> > I presume the ArtifactRequest protocol satisfies one of the
> > Kerberos usecase where we need to get an artifact from the IdP?
>
> No. ArtifactRequest is how you dereference an Artifact, not how you obtain
> one. Sending an artifact is a binding-level decision made by the entity
> that
> is sending a message. Requesting an artifact means exposing a protocol
> endpoint using that binding only.
>
> -- Scott
>
>
> To unsubscribe from this mailing list (and be removed from the roster of
> the OASIS TC), go to http://www.oasis-
> open.org/apps/org/workgroup/security-services/members/leave_workgroup.php.
