Hello there!

I am currently working on my Master thesis, where I am editing a SAML 2.0 implementation (simpleSAMLphp, but it's not relevant to the question, I think) and making an extension. To achieve my goals, I need to pass an Assertion containing an Authn Statement from one IdP (where the user authenticated himself) to another. I think the way to do this is using the defined "Extensions" field from "RequestAbstractType". While reading the Specification, I noticed it mentions that the Namespace of those extensions must be different from that of SAML 2.0.So my question is, can I just insert my Assertion as an "extra-parameter", inside an Extension, or must I somehow change the namespace?

In either case, could it be something as simple as:

(...)

<samlp:Extensions>

<saml:Assertion>

(...)

</saml:Assertion>

</samlp:Extensions>

Thanks in advance for the help!

Daniel Gomes