Assurance

["Roy, Nicholas S" <>]

Hi Bob,

I don't think Iowa will have the bandwidth to help out with this right away, 
but I have a couple questions around IdP behavior in this context:

The wiki you created says (under the IdP Behavior section):

"Is a custom login handler required?"

My questions are: Can the IdP send a person to different login handlers 
depending on the IAQ desired in the AuthnRequest (for instance, could I make 
a determination that someone needs Silver and kick them over to an X.509 cert 
mapping authN handler for that, but for everything else, just use username 
and password?)  And, for those SPs that can't request a specific IAQ in the 
AuthnRequest, if the "right knob" can be twiddled with policy to make the IdP 
aware that that SP needs a  specific IAQ, can I then use a different login 
handler to handle that?

I think I may have asked Nate Klingenstein a similar question at some point 
in the past, but I couldn't dig up that note.

Thanks,

Nick

-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of RL 'Bob' Morgan
Sent: Thursday, September 08, 2011 11:25 AM
To: 

Subject: Re: [Assurance] Seeking IdPs Interested in Working on Technical 
InterOp Issues for Assurance Program


> We're looking for a few interested folks to work on the details of 
> technial interop for the Assurance Program.

The InCommon TAC has been working on a list of issues related to technical 
interop for assurance.  I moved that doc into the Assurance collaboration
space:

https://spaces.internet2.edu/display/InCCollaborate/Assurance+Technical+Implementation+Issues

As folks can see there are many opportunities for exploration.

Additions, improvements, further questions, and answers are welcome.

  - RL "Bob"