On 10/3/13 1:14 PM, "Michael A Grady" <mgrady at unicon.net> wrote: >Interesting idea, but that approach would result in an AttributeStatement >return, correct, and not an AuthzDecisionStatement return? No, I'm talking about the SP, not the IdP. Adding support to the IdP would mean a new profile handler. -- Scott