> I would recommend that 4.1.3.5 should be re-written to remove the SSO
> service to local ITS transfer - so that the SSO service issues the
> redirect directly to the user agent. This simplifies the message
> interactions - benefiting performance and configurability.
It was never intended as a physical step, just a logical one, but it doesn't
read that way, and I don't think it benefits anything to even mention it.
> Whilst doing this I would also address my previous comment about the
> IDP-initiated flow of the text from line 331 to section 4.1.3.5 - plus
> have some additional words on the artifact binding.
Thx.
-- Scott