...
Chris Phillips shared a Gliffy diagram of some possible configurations:
https://spaces.at.internet2.edu/display/OpenID/March14-conf+call+notes\
All of the current gateway implementations only function in one direction: from the authentication source to the application.
...