> I wouldn't expect a bank to use OAuth > to secure their services but WS-Federation > definitely could. This isn't a technology issue though, it is one of theology. Handing off your authentication credentials to a third-party is a great idea until the third-party is compromised. Martin...