Fwd: [imi] Microsoft contribution to IMI TC: Retrieving metadata via HTTPS GET

[John Bradley]

FYI a new contribution to the IMI-TC describing an undocumented behavior of  Cardspace.

I deleted the large attachment.  The document should be in the TC Document repository.

John Bradley

Begin forwarded message:

From: Mike Jones <Michae...@microsoft.com>

Date: January 26, 2009 6:31:58 PM GMT-03:00

To: "i...@lists.oasis-open.org" <i...@lists.oasis-open.org>

Subject: [imi] Microsoft contribution to IMI TC:  Retrieving metadata via HTTPS GET

Microsoft is pleased to be able to contribute the attached document to the IMI TC.  It describes a behavior of CardSpace that we failed to describe in the ISIP – the ability to retrieve metadata via HTTPS GET, rather than WS-MetadataExchange.

 

This actually parallels WS-Federation, where Section 3.2 describes the ability to retrieve metadata in both ways as well.  It would be good to document this option for Information Cards in the specification.

 

                                                                -- Mike

[Axel Nennker]

CardSpace first tries the WS-way, then if there is no answer or an
error then it tries HTTPS GET to retrieve the metadata.

An STS that prefers HTTPS but does not want CardSpace to fail in the
first try can include a '?' in the URL for the metadata endpoint.
When CardSpace finds a ? then it tries HTTPS GET immediately without
trying WS-*

-Axel

On 2 Feb., 19:23, John Bradley <ve7...@ve7jtb.com> wrote:
> FYI a new contribution to the IMI-TC describing an undocumented  
> behavior of  Cardspace.
>
> I deleted the large attachment.  The document should be in the TC  
> Document repository.
>
> John Bradley
>
> Begin forwarded message:
>

> > From: Mike Jones <Michael.Jo...@microsoft.com>
> > Date: January 26, 2009 6:31:58 PM GMT-03:00
> > To: "i...@lists.oasis-open.org" <i...@lists.oasis-open.org>
> > Subject: [imi] Microsoft contribution to IMI TC:  Retrieving  
> > metadata via HTTPS GET
>
> > Microsoft is pleased to be able to contribute the attached document  
> > to the IMI TC.  It describes a behavior of CardSpace that we failed  
> > to describe in the ISIP – the ability to retrieve metadata via HTTPS  
> > GET, rather than WS-MetadataExchange.
>
> > This actually parallels WS-Federation, where Section 3.2 describes  
> > the ability to retrieve metadata in both ways as well.  It would be  
> > good to document this option for Information Cards in the  
> > specification.
>
> >                                                                 --  
> > Mike
>
>
>

>  smime.p7s
> 3KAnzeigenHerunterladen

[John Bradley]

Cool:)

We were discussing if one or both of the metadata retrieval methods should be mandatory for RPs conformance on the IMI call this morning.  

I didn't know there was a way to force cardspace to try the Get method first.

=jbradley

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "ICF-WG-OASIS" group.
To post to this group, send email to icf-wg...@googlegroups.com
To unsubscribe from this group, send email to icf-wg-oasis...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/icf-wg-oasis?hl=en
-~----------~----~----~----~------~----~------~--~---