FYI, we had a discussion of possibilities for a 'SAML & OAuth Hybrid' at last week's IIW. The motivation & model is similar to the recent OpenID OAuth 'Hybrid' extension [1]) Deck from the IIW session at [2] Regards Paul 1 - http://step2.googlecode.com/svn/spec/openid_oauth_extension/latest/openid_oa... 2 - http://paulmadsen.posterous.com/saml-and-oauth-hybrid