RE: [security-services] SAML 2.0 tech overview - initial diagrams

> Would appreciate that these are checked - and then I can 
> start producing the text.

A quick glance looks good, my only concern might be the notion of
"redirecting with <Response> from the SSO service to the ITS at the IdP.
It's not clear from the diagram that this step isn't normatively in the
profile, and it definitely isn't a use of a SAML Redirect binding to move
the response.

-- Scott