> I'd like to propose that the "LOA" concept be more than just a numeric
> value, but more policy based.

We can leverage a policy framework and keep the protocol simple by
relaxing the value to be a string.  For many cases an integer that
maps to the NIST value will be sufficient, but I'm fairly certain you
could satisfy your use cases with an arbitrary string value indicated
by the client and interpreted in whatever fashion you like at the
server.

M

-- 
You are currently subscribed to cas-dev@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-dev

Reply via email to