Major Description
This task is to implement more stringent requirements on allowing OnBehalfOf/ActAs in the STS. A new interface will be introduced to determine whether or not is is allowed to issue a new token OnBehalfOf/ActAs some other token. To support either of these things in the STS it will be necessary to plug in a TokenDelegationHandler implementation to handle a specific token. Implementations are provided in the STS for SAML Tokens and UsernameTokens.