ECP delegation

[Eddie Harari]

HI All ,

  I was able to activate the ECP profile and to test it using the demo script.
  I am reading the ECP profile documents but I cant find any place
that  specifies the authentication delegation process.

  I hope i am using the right terms,what i mean is the following:

 1. User authenticates via IDP using any kind of profile and gets a SAML2 token.
 2. User Pass this TOKEN to an SP
 3. SP takes this token and use it to authenticate to another SP ( of
course it will do so with the IDP help ... as the SP cant use the
SAML2 token of the client and it needs the IDP to provide a new TOKEN
BASED on the original token).

 4. I understnad that this is part of the ECP profile (authentication
delegation). I want to know what do i need to do in order to test
this...

thanks ,

 Eddie.