Re: Metadata, IdP Disco, AuthnRequest, etc...

[Karsten Huneycutt <kph@unc.edu>]

On 11 May 2007, at 15:53, Karsten Huneycutt wrote:

> Along those same lines, why can't the IdP Discovery Service  
> (optionally) return (signed) metadata about the requested IdP?  How  
> does the IdP Discovery Service allow a SP to deal with  
> participating in multiple federations simultaneously?  The service  
> will redirect back to the SP, which will allow the SP to redirect  
> to other IdP disco services, but

Gah, editing malfunction.  To complete my thought:

The service will redirect back to the SP, which will allow the SP to  
redirect to other IdP disco services, but what does the user  
interface look like for that?  Will the first IdP disco service have  
a "none of these, sorry!" button?  Will the user be presented with  
potentially three or four different "choose one of these completely  
irrelevant choices" pages before getting to one that has the correct  
choice?

KH

-- 
Karsten Huneycutt
Systems Specialist, ITS Identity Management
kph@unc.edu