RE: [security-services] Inclusion of Federated NameRegistrationProtocolin SAML 2.0

> Could this not be accomplished by the IdP (optionally) returning a "fresh"
> federation identifier as part of the AuthNResponse? That is a modest
> extension to an existing protocol vs. the introduction of a whole new
> request-response pair.

If the old one is also included, you mean?

-- Scott