Something about the concept

I've convinced my self that making an IdP in smartcard using SCWS is possible if one's using SAML HTTP Redirect Binding that URL-encodes SAML assertions. Another way would be to use SAML HTTP Post Binding but that would need base 64 encoding that a lot more processing power.

I now have to find how can SCWS maintain a trusted certificate store.