RE: [saml-dev] extending SubjectLocality

> Suppose an IdP were to map this address to a two-letter 
> country code (e.g., US).  What is the best way to carry this 
> two-letter country code in SAML, in an authentication 
> statement or an attribute statement?

Depends... Are you trying to say that the Authentication took place
from a system in the US or are you trying to say that the user is in
the US?

That would dictate where the data should go.

Conor