Franchise access being authenticated by our Shibboleth IdP

[Peter Schober]

* Keith Carr <kecarr at sgul.ac.uk> [2012-02-23 18:02]:
> So I would need to "share" a new entitlement with our SP's in order
> to differentiate the new franchise.

No, quite the opposite. The SP shouldn't (and usually cannot) be
involved in any of that. All the SP should care about is that the
principal (possibly completely unknown to the SP, if no PII attributes
are also transmitted) has been deemed elegible for accessing this SP
by the responsible people, in accordance with any contracts that may
exist.
-peter