FYI, the OASIS SAML V2.0 Deployment Profiles for X.509 Subjects was recently voted to Committee Specification status: http://wiki.oasis-open.org/security/SstcSaml2X509ProfilesDeploy Briefly, the life of an OASIS document is as follows: Working Draft ==> Committee Draft ==> 60-day Public Review ==> Committee Specification ==> Attestations ==> OASIS Standard Before a Committee Specification can be considered as an OASIS Standard, three OASIS member organizations must attest to have implemented the Specification. In the case of the Deployment Profiles for X.509 Subjects, I don't believe three such attestations exist, so I predict the document is destined to go no higher than Committee Specification. I mention this because it may have some bearing on an issue being discussed in another thread. Tom Scavo NCSA