AuthnRequest and isPassive=true

Title: AuthnRequest and isPassive=true

Is there any commentary expanding on the spec in what isPassive=”true” means? Or is meant to mean?

The description of “not visibly taking control” seems a bit ambiguous. Does that mean the login screen should mimic the service provider site? Does that mean return an error otherwise?

thanks,

Paul