Subject: [Sip] Concern with sending errors in SIP-SAML

From: Shida Schubert <[email-masked]>
Date: Mon, 30 Oct 2006 23:39:32 -0800

Hi;

SIP-Identity defines its own error response for
when verification does not work(438) or when certificate
that identity-info references is invalid(437). Now with
certificate being embedded or be referenced in the
SAML as SIP-SAML proposes, what happens when certificate
embedded or referenced in the SAML assertion fails
when verifying the signature attached by the authentication
services?

Should it return the error response defined in
SIP-SAML or should it return the error response defined
in SIP-Identity for when verification fails(438) or when
certificate is invalid(437)? If it's the latter, proxy
will need to be stateful to have the ability to recognize
that it sent a reference to SAML assertion and not
certificate alone, in order to handle the error properly.

Whatever decision we come to, I believe we need to
define this somewhere.

Regards
Shida

_______________________________________________
Sip mailing list  https://www1.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use [email-masked] for questions on current sip
Use [email-masked] for new developments on the application of sip