Subject Re: VO challenges - article
From Tom Scavo <trscavo@xxxxxxxxxxxxx>
Date Tue, 27 Oct 2015 11:39:34 -0400

On Tue, Oct 27, 2015 at 10:04 AM, Cantor, Scott <cantor.2@xxxxxxx> wrote:
> IdP has a broader functional scope in SAML than just authentication. Once you have a proxy IdP that's doing all the real work of attributes and provisioning and so forth, the small bit left is easy to replace with a commodity.


I think what you're saying (and I strongly agree) that the
authentication providers will whither while the attribute providers
will flourish.