Implementation Issues
NameIdentifier
MyProxy-first or IdP-first?
Passive Authentication
OpenSAMLinGT
IdPDiscovery