I might get time to do at least a partial federated authorization spec tomorrow early morning -- we'll see.

Please weigh in here if you manage to get time to skim it before the call.

(In the course of working on this spec, I ruthlessly chopped out lots of duplicative text, partly because one purpose was to get things more readable and partly because the spec was getting short enough that the main sections were ending up next to each other in most cases, with little need to do cross-references to make sense of the three-party "dance" through links. But I think quite a few of the edits could be back-ported to the existing specs, if we ultimately don't like the refactoring idea. I'm keeping track of a few key editorial things I want to do regardless even of this back-porting notion.)