scott cantor bqbvdn6osuedu dont think leaves much deploymentimplementation interpretation since saml 1 text largely identical explicitly stated many occasions interpretation dont know else tell im trying argue isnt reasonable explicit burden implementations bit plain fact older idps varied partly authenticationmethod called say reused session often resent original method whether timestamp got updated preserved entirely dependent whether idp way remember didnt one worked least default scott unsubscribe email zwuiopcitsxkbbpazwlistsoasisopenorg additional commands email rnzpzqvxvvklistsoasisopenorg tue 05 aug 2008 212229 0500 samldev value authninstant