<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<div>Johannes & Nat,</div><div><br></div><div>Shibboleth has been using this architectural separation for many, many years and it's proven flexible and useful. Authentication providers are rarely found separate from attribute providers, and the discovery service is more frequently associated with the service provider than anyone else, but it's a very clean model.</div><div><br></div><div>Run with it,</div><div>Nate.</div><br><div><div>On 04 Apr 2009, at 06:00, Johannes Ernst wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">But architecturally spot on. At least I think so ;-)</font></p> <p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"><br></p> <p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"><br></p> <p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"><br></p> <p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">On Apr 3, 2009, at 22:58, Nat wrote:</font></p> <p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"><br></p> <blockquote type="cite"><p style="margin: 0.0px 0.0px 0.0px 10.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">Right. And I think we are approaching a time that we should stop thinking of an OP but Discovery provider, Authentication Provider, and Attribute Provider.</font></p> </blockquote></blockquote></div><br></body></html>