86
Explanation (cont.)
<Assertion>
      …
      <Subject>
              <NameID Format="urn:oasis:names:tc:1.1:nameid-format:emailAddress">
                  j.doe@acompany.com
              </NameID>
              <SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
                      <SubjectConfirmationData Recipient="https://www.CarRentalInc.com"
                                                                     NotOnOrAfter="2005-01-31T13:00:00Z">
                      </SubjectConfirmationData>
              </SubjectConfirmation>
      </Subject>
      …
</Assertion>
The bearer of this
assertion can confirm
that he is the subject
provided he delivers
this assertion to the
CarRental service
before 1pm GMT
on Jan. 31, 2005.