RE: [security-services] SAML 2.0 tech overview - initial diagrams

[Scott Cantor <cantor.2@osu.edu>]

> I would recommend that 4.1.3.5 should be re-written to remove the SSO
> service to local ITS transfer - so that the SSO service issues the
> redirect directly to the user agent.   This simplifies the message 
> interactions - benefiting performance and configurability.

It was never intended as a physical step, just a logical one, but it doesn't
read that way, and I don't think it benefits anything to even mention it.

> Whilst doing this I would also address my previous comment about the
> IDP-initiated flow of the text from line 331 to section 4.1.3.5 - plus
> have some additional words on the artifact binding.

Thx.

-- Scott