May a shibboleth IdP deliver attributes for authZ without preceding authN ?

[Tom Scavo]

On Wed, Oct 12, 2011 at 6:58 AM, Peter Schober
<peter.schober at univie.ac.at> wrote:
>
> But how would that change anything for the
> OP's (nonsensical, IMHO) request to have the IdP issue an authn
> statement (when authn is done elsewhere) over an attribute query?

It doesn't, but I think the original request was a simple
misunderstanding. Sam Hartman and Josh Howlett (of the moonshot
project) understand this problem space well enough. Josh, in
particular, is fully aware of the issues with respect to standalone
attribute query.

Tom