Page History
...
Phase 1: Collecting "attributes" about the user, as identified by the REMOTE_USER / userId header passed by the SP – See section A.3
Phase 2: Making an authorization decision based on the attributes collected in Phase 1
...
Overview
Content Tools