security-services message

Subject: RE: [security-services] Another attempt at AllowCreate cleanup

From: "Brian Campbell" <bcampbell@pingidentity.com>
To: "Scott Cantor" <cantor.2@osu.edu>, "Polar Humenn" <polar@syr.edu>
Date: Tue, 24 May 2005 10:33:41 -0600

> -----Original Message-----
> The trick is that it's up to the IdP to determine whether what it's
> doing qualifies, and this is the source of all the squishiness.

That's the reason I was trying to word it such that the SP isn't
actually preventing anything but rather just requesting that the IDP
behave a particular way.