On 2/11/14, 6:39 PM, "Will Hartung" <> wrote:
>What are some use cases where multiple AuthnStatements are sent, and
>what are some examples of how Service Providers handle them?
The only use case I know of is Rob's, and I know of no SPs personally that
handle it, nor is there any profile that would describe that behavior
interoperably. OTOH, I know of deployment profiles that explicitly rule
out multiple statements to avoid the ambiguity. If I was defining the
profile today, I would push strongly for limiting it.
-- Scott
