[OpenID] Infocards [SAML Token] Vs OpenID Infocards [OpenID Token]

Prabath Siriwardena siriwardena.prabath at gmail.com
Wed Dec 19 17:07:44 UTC 2007


Thanks Peter.

Johnny would you like to add your thoughts as well....

On Dec 19, 2007 10:00 PM, Peter Williams <pwilliams at rapattoni.com> wrote:
> The only claim I've ever heard is that library implementors have less work to do parsing an openid msg, in contrast to parsing a xml message (using xerces etc). Thus there is lower start up cost to folks who have no access to a existing saml library (eg that which comes with windows).
>
> The main analytical difference is, in my view, the application of infocards with async ws-security protocols, where the saml mesg format comes onto its own as it exploits asymmetric security services befitting the connectionless modes of web services.
>
> Im still on the fence with regard to the infocard protocols. I have to see a compelling ui first: the current ui is simply unsupportable. I also rather concerned about the xerox patents, if I were to deviate from the model recommended by msft.
>
>
> -----Original Message-----
> From: Prabath Siriwardena <siriwardena.prabath at gmail.com>
> Sent: Tuesday, December 18, 2007 6:19 PM
> To: general at openid.net <general at openid.net>
> Subject: [OpenID] Infocards [SAML Token] Vs OpenID Infocards [OpenID Token]
>
> Hi;
>
> It's obvious that there are many advantages of OpenID Infocards over OpenID.
>
> But, what are the advantages of OpenID Infocards [OpenID Token] over
> Infocards [SAML Token] ?
>
> If I am a RP who is implementing my authentication mechanism from
> scratch, why should I support OpenID Infocards instead of Infocards
> [SAML Token]?
>
> What are the benefits of having OpenID Token, instead of SAML token?
>
> Thanks & regards.
>
> - Prabath
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general
>



More information about the general mailing list