RE: [security-services] comments on sstc-saml-profiles-2.0-draft-12

> The authn request isn't the issue, the principal always has to 
> authenticate
> to the IdP at some point, or it wouldn't have any idea what to do.


- also my point - this is not mentioned at all in the text (I think).  



John