scott cantor bqbvdn6osuedu understand thats told however dont see flexibility written spec least whats comes sso cookies general saml attitude dont ask dont tell nobody wanted talk really happening implementations look intersitetransferservice left scope part general attitude didnt agree doesnt appear ambiguity wording spec currently stands id like someone point says authninstant allowed something authentication user took place understand viewpoint authnmethod set back method defined cookie 11 attitude best changed ac class think spec say particularly sso profile certainly problems errata directed ambiguity however dont see dont think errata people said discussed outside spec especially conflict current wording spec isnt first time somebody felt spec unclear others thought completely clear usually im one thinks clear case happen also think wording clearit happens conflict interpretation text came thats think something changed selfinflicted problem case want errata id like hearsee proposed changes would would call sso profile authninstant must reflect time asserted ac class declaration associated users session time cant determined idp assert existingsession class authninstant set value current time youre saying true none normative change way follow rules since authninstant required ari noted scott unsubscribe email zwuiopcitsxkbbpazwlistsoasisopenorg additional commands email rnzpzqvxvvklistsoasisopenorg tue 05 aug 2008 234923 0500 samldev value authninstant