ECP Issue with IdP 2.3.3

[Cantor, Scott]

On 9/2/11 8:02 AM, "Tom Scavo" <trscavo at gmail.com> wrote:
>>What two? The only one ECP supports is PAOS.
>
>But the SP might authenticate the non-browser client in two different
>ways, on two different endpoints. This would be have to be
>communicated out-of-band of course.

I think you mean IdP, and that's a SOAP binding, not what was asked about
here.

And yes, there's a need to come up with a security policy language for
this now that we can all agree WS-* is pining for the fjords.

-- Scott