|18/06/21||"[Identity Providers] MAY release the attribute bundle defined in 4 to all Service Providers which assert this category by default, or only for Service Providers which assert the entity category and with which|
they have an agreement."
I wonder what purpose the support-EC then serves if it allows IDPs to be spec-compliant even when only releasing the respective attribute bundles to a locally selected (and unknown to anyone else) (sub-)set of services (possibly empty). I.e., I could immediately claim all our IDPs to be compliant with both support categories -- they just might have different views on whom they have agreements with (or what this phrase means)?
|Annoymous and Pseudonymous||Peter Schober, Aconet|