bare request or response

Kevin Turner kevin at
Tue Sep 26 17:30:00 UTC 2006

On Mon, 2006-09-25 at 14:24 -0700, Dick Hardt wrote: 
> 2) fetching signed claims (part of attribute exchange)
> 	IdP sends a fetch response to Issuer containing any attributes  
> required by Issuer, and also user identifier
> 		* there was no preceding fetch request
> 	Issuer sends a store request to IdP with Claim
> 		* there is no matching store response

I guess you could do it that way, but it seems quite peculiar.  Why are
you turning things inside-out in this exchange?  Why "response, store"
rather than "fetch, respond"?

More information about the specs mailing list