Shibboleth Developers

["Scott Cantor" <>]

> What about the case of an IdP that requests and obtains attributes
> from other IdPs?  I don't have a specific use case, but should we not
> rule out the possibility?

How would you do it at the statement level? It would be meaningless, since
you couldn't maintain the signature or anything else, so you might as well
merge the assertions.

Or you're talking about multiple assertions and forwarding of some sort, or
embedding assertions as attributes, neither of which would be multiple
statements.

-- Scott