<br><tt><font size=2>Hi,</font></tt>
<br>
<br><tt><font size=2>I am in the process of implementing verification of
assertions. Based upon reading the various sections of the specification,
I can see how we could could persist some of the information such as returnToURL
and the discovery information in some persistent store (such as session).
However, I am not able to figure out how we could implement this
type of support without persisting the information. </font></tt>
<br>
<br><tt><font size=2>Is there a way to leverage a callback to the OP after
the authentication request is returned to the Relying Party that could
retrieve this information and perform the verfication without persisting
this information? </font></tt>
<br>
<br><tt><font size=2>Thank you<br>
Todd Kaplinger<br>
Project Zero Architecture and Development<br>
</font></tt><a href=http://www.projectzero.org/><tt><font size=2>http://www.projectzero.org</font></tt></a>