[OGSA-AUTHZ] comments for Use of SAML to Retrieve Authorization Credentials