Deployment Guide for Proxying Assurance between OpenID and SAML

SAML and OpenID are key federated identity protocols. Both SAML and OpenID define mechanisms in support of expressing assurance information on protocol messages, respectively Authentication Context and the Provider Authentication Policy Extension (PAPE). In deployment scenarios that require proxying from one of the protocols to the other, it becomes necessary to map to and from the corresponding assurance mechanisms. This document provides guidance on this mapping and related issues.

• V3 assurance-deploy-guide-03.html
• v4 assurance-deploy-guide-04.html