[PROPOSAL] bare response / bare request

[Dick Hardt]

On 2-Oct-06, at 12:34 PM, Kevin Turner wrote:

> On Sat, 2006-09-30 at 20:09 -0400, Dick Hardt wrote:
>> Motivating Use Case
>> ----------------------------
>> The IdP would like to allow the user to click a link on the IdP to
>> login to an RP. This requires a bare response to be able to be sent.
>
> How will RPs that customarily use a request nonce treat this?

There will not be a request nonce -- could have the IdP say "none"