text_combined: tom scavo mkjirtzgmailcom consumption authninstant matter policy sp yes idp produces incorrect value least noninteroperable may broken depending point view sp partially bases access control decision authninstant may make wrong decision authninstant incorrect instance consider idp routinely sets issueinstant authninstant value implementation broken well sp deployment inspects authninstant asserted idp one could claim suppose answer sp happens consume authninstant doesnt make correct least idp noninteroperable tom feb 11 2008 1211 pm scott cantor wrote hmm qualify errata think implementation least deployment dependent theres never rule said authninstant meant used authentication usually eye beholder minimum certainly wouldnt apply globally profile basis scott unsubscribe email zwuiopcitsxkbbpazwlistsoasisopenorg additional commands email rnzpzqvxvvklistsoasisopenorg unsubscribe email zwuiopcitsxkbbpazwlistsoasisopenorg additional commands email rnzpzqvxvvklistsoasisopenorg tue 05 aug 2008 210611 0500 samldev value authninstant