Alternative IdP Working Group

[David Walker <>]

Everyone,

In hopes of jump-starting next week's discussion of our alternatives, I've filled in the "capabilities" columns of our table from your documents:

https://spaces.internet2.edu/x/FgrkAg

PLEASE fix my mistakes.  In particular, I noticed a couple of columns where we might not be completely in agreement.  Here are proposed interpretations:

• Support for Entity Categories (R&S).  The issue here is whether the IdP can be configured to release attributes automatically to any SP in a specified Entity Category like R&S.
• Support for Multiple AuthN Contexts for MFA and Assurance.  The issue is whether the IdP can invoke different authentication methods based on authentication contexts specified in the SAML request (e.g., the Multi-Context Broker).

Sound reasonable?

David

Attachment: signature.asc
Description: OpenPGP digital signature