> well, you state that the IdP and the SP need to have an identifier in > common for the subject. I was thinking about an attribute authority > different from the "original" IdP. So let's say I authenticate to my > school and the SP goes on and gets some aditional attributes from the > ministry of education... That is covered by Leif's statement "An AA is > an IdP too...", but I want to make sure that the trust model allows for > that kind of scenario's.
Yes, it does. Josh. JANET(UK) is a trading name of The JNT Association, a company limited by guarantee which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Oxford, Didcot, Oxfordshire. OX11 0SG _______________________________________________ abfab mailing list [email protected] https://www.ietf.org/mailman/listinfo/abfab
