RA21 - Resource Access for the 21st Century

[Cantor, Scott]

> On page 17 they seem to be (i)framing the IDP, which won't go down
> well either (since the subject then has no choice to even see /where/
> they are sending their credentials, i.e., who is asking for their
> password) but that's hopefully just an early draft.

The good? news is that will break Shibboleth.

The sam2int revisions include specific prohibitions on framing login or logout requests.

-- Scott