On 25-Oct-06, at 11:15 AM, Josh Hoyt wrote: > On 10/25/06, Dick Hardt <dick at sxip.com> wrote: >> > I have said this several times already, but THE IDP DOES NOT >> HAVE TO >> > TRUST THIS INFORMATION. >> >> Then why send it? > > Why send which one? Sorry, why send the IdP-specific identifier.