> I'd like to propose that the "LOA" concept be more than just a numeric > value, but more policy based.
We can leverage a policy framework and keep the protocol simple by relaxing the value to be a string. For many cases an integer that maps to the NIST value will be sufficient, but I'm fairly certain you could satisfy your use cases with an arbitrary string value indicated by the client and interpreted in whatever fashion you like at the server. M -- You are currently subscribed to cas-dev@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev