Overview#

SAML Holder of Key mechanism protects messages with a Digitally Signed SAML Assertions (issued by a Authoritative Entity) carrying client Public Key and authorization information with integrity and confidentiality protection using mutual certificates.

This Holder-of-Key (HoK) method establishes the correspondence between a SOAP message and the SAML Assertions added to the SOAP message.

More Information#

There might be more information for this subject on one of the following:

• Proof-of-Possession

---

• [#1] - https://docs.oracle.com/cd/E19509-01/820-0595/ggssr/index.html - based on information obtained 2012-05-12