On 1/22/07, Hans Granqvist <hgranqvist at verisign.com> wrote: > Ben Laurie wrote: > >> Or are you suggesting these RP profiles be consumed by the UA? > > > > No. > > > Who then? The RP tells the OP what kinds of authentication are acceptable. So, the profile is consumed by the OP.