scott cantor bqbvdn6osuedu understand sps entityid would logical candidate inclusion subjectconfirmation meant subjectconfirmation part subject refer identifier subjectconfirmation alternative subject assertion arent really trying say principal trying say subject assertion subject meant conceptually thingpersonconcept issued also note samlcore section 3414 processing rules authnrequest protocol assertions returned must contain element represents presenter identifier type format determined identity provider guess could argue say identifier type format present determined sp intended presenter assertion would think sps entityid go subject unless principals nameid subject case sps entityid would go subjectconfirmation two different meanings subject assertion reserved entity statements assertion true isnt likely sp delegationimpersonation use cases quite casedependent whether sp name belongs one spot interchangeable scott unsubscribe email zwuiopcitsxkbbpazwlistsoasisopenorg additional commands email rnzpzqvxvvklistsoasisopenorg fri 08 aug 2008 055508 0500 samldev nameidless saml subject