Applications that autorefresh

[Chad La Joie]

On Mon, Jul 16, 2012 at 6:16 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>>That said, my main concern would be dealing with how state/processing
>>changed in the various cases.  It seems like a whole lot of trouble to
>>deal with something the SP needs to address anyways.
>
> The issue is whether the IdP is stateful on the server side while handling
> logins. The SP can't do anything about that part. Once it's issued a
> request, it's out of the loop.

The original question is really an SP issue, not an IdP issue is what
I meant.   But no, I have no intention of trying to tackle this in
IdPv3.  The more I think about it the more ways I see for it to
introduce behavior that would be incredibly difficult to explain or
diagnose.  So yes, the IdP will gather up state and hold on to it for
a while when processing a request but it won't hold it for days.

-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered