* Mak, Steve <makst at upenn.edu> [2021-07-09 16:41]: > The only exception I can really justify is for a wildcard-ACS > enabled SP, but hardly anyone uses those. Plus maybe specific auth contexts/classes/refs but then the SP should check what it gets back from the IDP anyway. -peter