...
Chris Phillips shared a Gliffy diagram of some possible configurations:
https://spaces.at.internet2.edu/display/socialid/March14-conf+call+notes|OpenID:display/socialid/March14-conf+call+notes|\
All of the current gateway implementations only function in one direction: from the authentication source to the application.
...