Mishra Taylor Boon Evan Prodromou Darren Platt 1. Make sure all issue groups are defined. B2B issue is actually a more general issue, where an intermediary can add assertions to a message. Need to call out intermediary issue. Separate in the requirements section intermediaries, enveloping.
Privacy issues affect all parts of the requirements.
Privacy issues should be called out for all types of interactions. Anonymous use is another issue, orthogonal to privacy. Logout, step-up authentication aren't called out on this list. Logout, step-up are part of sessions. SSO and sessions are not equal.