Shibboleth Developers

["Scott Cantor" <>]

> What about the case of an IdP that requests and obtains attributes
> from other IdPs?  I don't have a specific use case, but should we not
> rule out the possibility?

I should say since it's on the subject that when asked, I've said repeatedly
that even though it looks more invasive to handle this at the SP, I think
it's much cleaner to query multiple sources and do identifier mapping there,
and leave the trust relationships and policies point to point instead of
artificially introducing proxying and delegation of authority into the
picture prematurely.

I'm thinking long and hard about how to structure the SP for 2.0 to make
adding that possible at some point.

-- Scott