For IdPs that must support both IPSIE compliant and non-compliant RPs, the IdP may not know a priori that a particular RP would like the IdP to operate in an IPSIE compliant manner. How do we signal to the IdP that it must operate at a particular compliance level for that RP?
For IdPs that must support both IPSIE compliant and non-compliant RPs, the IdP may not know a priori that a particular RP would like the IdP to operate in an IPSIE compliant manner. How do we signal to the IdP that it must operate at a particular compliance level for that RP?