how would we suggest improving the user experience at this SP

[Cantor, Scott]

On 6/4/14, 11:21 AM, "Peter Schober" <peter.schober at univie.ac.at> wrote:
>
>[ Slight tangent: I wonder if as an SP I should go one step further
>and turn such error pages into HTML forms with one large, friendly
>button saying "Get me access" that will notify the technical contact
>given in SAML metadata for the IDP the subject used to authenticate,
>providing all the detail s/he may need to act upon it (date, time,
>client IP, attributes needed, attribtues [not] recieved). ]

That was certainly where the original thinking was headed. One of the
problems with that is that the technical contact is often not the right
choice, and we were looking at using the administrative contact for that.
Ultimately it seemed to me that the best option was to avoid email
altogether and leave it up to the IdP by way of a URL that could do
anything they wanted it to do, including initiate an email if that's the
choice they want to make.

-- Scott