>Ironically I was just annoying Eric Goodman by noting the IdP doesn't >strictly enforce the priority order, but it does process things in order >and sometimes you can exploit that. Funny, I saw that as me annoying you with questions about how RequestedAuthnContext is processed... --- Eric