ari kermaier rgpophadhxloraclecom bearer token form authentication cookie bearer token idp decides implement without retaining enough state remember original time compliant would say idp retain enough state produce authnstatement internally consistent ie content describes authentication event fact compliant thus idp preserve time user presented password claim password ac first authnstatement must henceforth use existingsession ac ari unsubscribe email zwuiopcitsxkbbpazwlistsoasisopenorg additional commands email rnzpzqvxvvklistsoasisopenorg tue 05 aug 2008 232740 0500 samldev value authninstant