RE: [security-services] Affiliation ID

> I would suggest that you send it to the affiliation owner, even if
> they are not a member (although I think they typically will be)
> and let them deal with the rest of the work internally.
> 
> Sending it to any random SP within the affiliation doesn't seem
> to make sense to me.

I think this is probably errata then, since the spec doesn't actually say
this.

-- Scott