...
- RP-embedded (like our HTML mockup)
- Cloud selector (like Janrain, Avoco, etc.) --formerly called "ISA" by this ULX WG (and its predecessors)
- Active client selector
Trends in active client selectors:
- It is self-evident that the scope of ULX be limited to "next gen" active clients
...
- "next gen" active clients to rely on OAuth instead of using:
- Dedicated client UI to gather auth materials
- Dedicated UI to review/approve attribute/claim release
- WS-Trust to fetch token
ISA Variations:
- User-aware vs. stateless --can we think of better names?
- Request-and-forward (ISA fetches token and POSTs to RP) vs. Selection-only -- can we think of better names?
...