Question on response status codes on auth failure

[Cantor, Scott]

> Our IdP also serves a signing service with extended capabilities to
> support that scenario.
> An opt out button = cancel, is a requirement the IdP must support among
> other things.

You might want to just map the button to a custom event then and eventually map that to a specific status you define, but it sounds like you don't care much. In any event (sic), you can do that if you want.

-- Scott