...
- What are the key attributes Home Organisations should populate for their end users and release to your SP?
5.
...
Questions on audits
- Is it enough for you that a Home Organisation self-asserts that it complies with a certain LoA level?
- Should some external body have some enforcement rights (e.g. Home identity federation can remove “compliant” tag from the Home Organisation if there are doubts that a Home Organisation fails its LoA level)?
- Are internal audits needed?
- Are external audits needed? Are you willing to share their costs?
...