> that was also one of my queries in producing the diagrams - it wasn't
> clear (at least after a few readings) - whether Response/Artifacts
> should/could go via the IdP ITS. Below implies that you believe the SSO
> service should send the response/artifact (via the appropriate binding)
> directly to the SP? I must admit the SSO->ITS step seemed unnecessary.
I'm not sure how we want to describe it. I guess in part I was just building
around what some of the pieces were in the original profile, but it may just
be harder to understand that way.
Should I just remove that piece from the profile?
-- Scott