Authorization decision query

[Michael A Grady]

On Oct 3, 2013, at 12:16 PM, Cantor, Scott wrote:

> On 10/3/13 1:14 PM, "Michael A Grady" <mgrady at unicon.net> wrote:
> 
>> Interesting idea, but that approach would result in an AttributeStatement
>> return, correct, and not an AuthzDecisionStatement return?
> 
> No, I'm talking about the SP, not the IdP.

Ah, right. We'd be on the IdP side of this, receiving the query from a service, and needing to respond. 

> 
> Adding support to the IdP would mean a new profile handler.

That's what I figured. Thanks.

> 
> -- Scott


--
Michael A. Grady
Senior IAM Consultant, Unicon, Inc.