Hello there!

I am currently working on my Master thesis, where I am editing a SAML 2.0 implementation (simpleSAMLphp, but it's not relevant to the question, I think) and making an extension. To achieve my goals, I need to pass an Assertion containing an Authn Statement from one IdP (where the user authenticated himself) to another. I think the way to do ths is using the defined "Extensions" field from "RequestAbstractType". While reading the Specification, I noticed it mentions that the Namespace of those extensions must be different than that of SAML 2.0.So my question is, can I just insert my Assertion as an "extra-parameter", inside an Extension, or must I somewhow change the namespace?

In either case, could it be something as simple as:

 (...)

<samlp:Extensions>

        <saml:Assertion>

                  (...)

         </saml:Assertion>

 </samlp:Extensions>

Thanks in advance for the help!

Daniel Gomes