> The Identity Provider Discovery Service Protocol and Profile defines a
> 'policy' parameter in the request to the Discovery Service. Is this
> parameter meant to be a protocol extension point (of sorts)? That is,
> can it take on values other than those specified?
That was the idea, but there are none defined. I wanted to make sure the
protocol as defined returned exactly one or none, but allow for more
esoteric cases.
AFAIK, I have the only supporting implementation from an OASIS member
organization in any case.
-- Scott
