Re: [security-services] IDP Proxying & Distributed Authentication

[Scott Cantor <cantor.2@osu.edu>]

Tom Scavo wrote:
> I agree, this is what we do, and it works well.  By nesting an
> assertion in Advice, an IdP implicitly asserts: 1) I am an IdP Proxy,
> 2) I trust the IdP indicated in the nested assertion, and 3) I have
> validated the response that previously contained the nested assertion.

That would violate privacy in the general case, I was referring to passing 
along the context, not an assertion.

-- Scott