On Wed, Jan 14, 2009 at 9:02 AM, Nat Sakimura <> wrote:
Let me just ask one question to clearly understand what you are trying to achieve.
In the draft, it seems that it is the XRD provider who is requiring the multi-headed
authn among equal priority authentication services.
The assumption is then that the user controls XRD and he can pick
any number of Authentication Services as a group.
Then, he can require any RP to get assertion from all the member of the
group.
Is this the correct understanding?
Yep, that's exactly right.
