Dominick Baier put up an article yesterday showing how to use client generated SAML tokens for providing client credentials. This is more a demonstration of the capabilities of Geneva for credential and claim handling than a practical code library to use. I think the use of client generated SAML tokens would be quite rare in practice compared to other types of client credentials. However, the example does cover a number of important parts of Geneva such as claim identities, SAML tokens, and token handlers.