My personal preference is to keep network access discussions out of scope here.
I think the IDP can detect gss-eap based on the RADIUS AVPs such as acceptor-hostname and acceptor-realm that are sent by GSS-EAP. If another ABFAB application integration layer is used, then it may get more complex. My personal belief is that level of detail is not needed for the applicability statement. _______________________________________________ abfab mailing list [email protected] https://www.ietf.org/mailman/listinfo/abfab
