RE: [saml-dev] Does an Authentication Context URN actually reference an XML file?

> I can imagine that the RP might incorporate the document referred to in
> <AuthnContextClassRef> into the business agreement with the IDP, and then
> they might occasionally spot-check the version in their agreement with the
> version referenced in the assertion (maybe comparing a hash or a
> signature).

So as not to confuse Roger further, what you meant to say was
<AuthnContextDeclRef>, not <AuthnContextClassRef>, right?

-- Scott