[Concordia] RSA 2008 Demo: Scenario 2

[Scott Cantor]

> Yes, what happens at my IdP is that the first time that a Cardspace
> login happens, it needs to authenticate the user to link it to the
> pseudonym. From there on, no more local authen is needed.

Yeah, that's what I thought.

> I might end up enabling some sort of auto-federation to avoid this step.

If it's not a lot of work, I think it would be somewhat less confusing to
demo, but OTOH if some are doing that and some not, that's interesting too.

-- Scott