RE: [security-services-comment] SAML V2.0 Metadata Extensions forLogin and Discovery

["Cantor, Scott E." <cantor.2@osu.edu>]

> The use case is quite simple: the entity provides a logo and a
> background image, and the discovery service (or whatever user
> interface component we're talking about) "skins" the page in question.

Nobody working on the problem has suggested that as a requirement, that's my point. It sounds fairly bad in the scenarios that I can imagine using the extension. It doesn't fit the discovery case at all that I can see, and as somebody that runs an IdP, there's no way I would ever allow such a thing on my login page.

-- Scott