RE: [security-services] SAML 2.0 tech overview - initial diagrams

[Scott Cantor <cantor.2@osu.edu>]

> thinking about it more - not that simple.  Whilst it make sense to remove
> the SSO service to local ITS transfer in the SP initiated use case, the
> problem comes with the way the section is structured.  If 4.1.3.5 removes
> the SSOS->ITS transfer then in the IdP-initated use case the ITS
> disappears as well.  I'm not sure we want to do this.

Well, I don't see a problem simply characterizing the IDP-initiated flow in
a more general way as "at some point in the user's interaction with the IdP,
the Response message is sent to initiate the profile".

-- Scott