Am I correct that the MFG is an FP-STS and it is never an IP-STS? From watching the video, it sounds like the actual IdP is never the MFG, but the MFG has the capability to federate with thousands or even millions of IP-STSs (a WS-Federation/WS-Trust thunking
layer for the IdP). Because of its tight relationship with LiveID, an IP-STS, it seems like the MFG gets improperly called an IP-STS or IdP sometimes when it is in fact not. If I am correct here, it would be helpful to call the MFG an FP-STS when describing
it because many of us have this frame of reference, making this technology easier to come to terms with.
The eventual support for SAML 2 and interoperability with PingFederate will be fantastic. Looking forward to that.
Great video. Thanks for taking the time to produce it.