chad la joie gyslrkrhyiswitchch necessary well couple things would influence token issuers probably populating tokens audience restriction order convey assertion meant particular service set services issuer indicates assertion meant services b shouldnt sending c c shouldnt accept another aspect impacts would content assertion assertion contains sensitive information eg nonopaque name identifier user attributes issuer may want issue different assertion different services order show service minimal amount data require isnt say token cant used one service instead really need work token issuer determine set services token could used christian mielke wrote hi different webservices trust security token services provides saml 11 tokens neccessary client must obtain one token service sufficient obtaining one token used services trust security token service kind regards christian switch serving swiss universities chad la joie software engineer security werdstrasse 2 po box 8021 zürich switzerland phone 41 44 268 15 75 fax 41 44 268 15 68 gyslrkrhyiswitchch httpwwwswitchch unsubscribe email zwuiopcitsxkbbpazwlistsoasisopenorg additional commands email rnzpzqvxvvklistsoasisopenorg fri 08 aug 2008 125157 0100 samldev one token per endpointaddress