how would we suggest improving the user experience at this SP

[David Gersic]

>>> On 6/4/2014 at 10:21 AM, Peter Schober <peter.schober at univie.ac.at> wrote: 
> [ Slight tangent: I wonder if as an SP I should go one step further
> and turn such error pages into HTML forms with one large, friendly
> button saying "Get me access" that will notify the technical contact
> given in SAML metadata for the IDP the subject used to authenticate,
> providing all the detail s/he may need to act upon it (date, time,
> client IP, attributes needed, attribtues [not] recieved). ]

I'd personally like to see this. The alternative is that I get contacted by our helpdesk with the equivalent of "Somebody called and said he can't get to some service somewhere. We reset his password, and that didn't help. Please fix it." If I'm lucky, they'll tell me who the "somebody" is. If I'm really lucky, they'll also tell me what "some service somewhere is". Or, worse, six weeks later I get email from a Director or VP saying that in some meeting they were in, somebody mentioned something about something somewhere not working. That's always fun to track down.