<br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
True delegation by user to service client is an additional layer of<br>
complexity to the problem and requires additional pieces. We have some<br>
extensions to the IdP that support this and are still debating whether to<br>
roll that work into 3.0, mostly depending on time to do it.<br></blockquote><div><br></div><div>Is that the stuff that is described in the SAML Delegation / uPortal docs?</div><div><br></div><div><a href="https://spaces.internet2.edu/display/ShibuPortal/Configuring+Shibboleth+Delegation+for+a+Portal#ConfiguringShibbolethDelegationforaPortal-IdPConfiguration">https://spaces.internet2.edu/display/ShibuPortal/Configuring+Shibboleth+Delegation+for+a+Portal#ConfiguringShibbolethDelegationforaPortal-IdPConfiguration</a></div>
<div><br></div><div>Liam </div></div>