Session/Cookie Question

[Cantor, Scott]

> In the current SAML IdP & SP context, that means a "terms
> of use" required for a proper subset of functions behind the
> SP should be triggered and recorded within the service.

That’s just one of those eternal debates, we don't take a position, but if you need to know the specific resources involved, that has to be implemented within the service, not the IdP. The IdP featutes only operate at the level of granularity of the entityID/client_id.

-- Scott