http://www.oasis-open.org/apps/org/workgroup/security/download.php/16297/draft-saml-shared-credential-discussion-01.doc