RE: [security-services] Another attempt at AllowCreate cleanup

> -----Original Message-----
> The trick is that it's up to the IdP to determine whether what it's
> doing qualifies, and this is the source of all the squishiness.

That's the reason I was trying to word it such that the SP isn't
actually preventing anything but rather just requesting that the IDP
behave a particular way.