Conor P. Cahill wrote on 6/1/2005, 2:49 PM:
> Cameron Morris wrote on 6/1/2005, 2:30 PM:
>
> > So you are also proposing that the attributes in a query can be xpath,
> > and the asserted attributes follow your proposal. Correct?
>
> Correct.
PS. Note that there does not *have* to be a real query involved (e.g.
the IdP can have some out-of-band knowledge that the SP would want
some data returned and can return it as if the SP had queried it).
Not that their can't be a query, just that there are situations
where there is not an explicit query and the IdP may return
such attributes in an AuthnResponse.
Conor
