Shibboleth Developers

[Scott Cantor <>]

> If the requester is not "known" to the AA, it should return only 
> "public information" that it would give to anyone.  What this 
> information might be is a local decision.

Yes, but if I can authenticate to the AA, I have no easy evidence as to why
I'm asking for the user's attributes (proof of his presence). LDAP doesn't
address that either, that's why I characterized the AA as basically an
equivalent kind of service if you take the handle away (minus the searching,
we're certainly not going there).

-- Scott

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--