Content Comparison

...

1. Tooling packages readily available for processing messages.
2. WS-Trust, etc already support the forwarding and processing of delegated credentials.
3. Shib's CS support would have to support the use of holder-of-key.

Develop a New SAML Profile

1. Not Browser based.
2. Flow originates at the client (no Authn Request from the SP).
   1.