[OpenID] Infocards [SAML Token] Vs OpenID Infocards [OpenID Token]

Peter Williams pwilliams at rapattoni.com
Wed Dec 19 16:30:15 UTC 2007


The only claim I've ever heard is that library implementors have less work to do parsing an openid msg, in contrast to parsing a xml message (using xerces etc). Thus there is lower start up cost to folks who have no access to a existing saml library (eg that which comes with windows).

The main analytical difference is, in my view, the application of infocards with async ws-security protocols, where the saml mesg format comes onto its own as it exploits asymmetric security services befitting the connectionless modes of web services. 

Im still on the fence with regard to the infocard protocols. I have to see a compelling ui first: the current ui is simply unsupportable. I also rather concerned about the xerox patents, if I were to deviate from the model recommended by msft.

-----Original Message-----
From: Prabath Siriwardena <siriwardena.prabath at gmail.com>
Sent: Tuesday, December 18, 2007 6:19 PM
To: general at openid.net <general at openid.net>
Subject: [OpenID] Infocards [SAML Token] Vs OpenID Infocards [OpenID Token]

Hi;

It's obvious that there are many advantages of OpenID Infocards over OpenID.

But, what are the advantages of OpenID Infocards [OpenID Token] over
Infocards [SAML Token] ?

If I am a RP who is implementing my authentication mechanism from
scratch, why should I support OpenID Infocards instead of Infocards
[SAML Token]?

What are the benefits of having OpenID Token, instead of SAML token?

Thanks & regards.

- Prabath
_______________________________________________
general mailing list
general at openid.net
http://openid.net/mailman/listinfo/general



More information about the general mailing list