Assurance

["RL 'Bob' Morgan" <>]

I suppose the other thing to point out here is that I expect that there 
isn't really any experience with testing/monitoring in an 
assurance-is-required scenario because there are, at this point, hardly 
any real-life assurance-is-required scenarios.  I'm amazed that you have a 
vendor SP that is requiring something-like-Silver.  Are they actually 
supporting/requiring the use of the standardized AuthRequest/AuthnContext 
means of expressing assurance?

 - RL "Bob"