[PROPOSAL] Separate Public Identifier from IdP Identifier

[Kevin Turner]

On Thu, 2006-10-05 at 18:08 -0700, Marius Scurtescu wrote: 
> The only problem it seems to solve is that of vanity identifiers.  
> Switching IdPs where you had an IdP issued identity for the original  
> IdP does not seem to be possible, you have no control over that  
> original identity so you cannot use it anymore. If you had a vanity  
> identity with the original IdP then switching only means pointing  
> your vanity identity to the new IdP.

This much is true.


> Instead of dealing with vanity identities using the delegate tag why  
> not let the IdP manage your vanity identities?

How does this work?  I want to log in to an RP with my vanity identity,
what do I enter?  How does the RP get from what I enter to my IdP?