ACS as a Federation Provider–Home Realm Discovery Part 2

In my previous post, I had a question for all you:

What would happen if Adatum’s FP didn’t supply ACS with the whr parameter?

An the answer is: ….. ACS will simply ask the user!

 

image

ACS has no way (besides the whr parameter) of knowing where to go next (unless you configured your app with only 1 Identity provider I guess).

You might say that this page is ugly, and my look & feel is lost and you would be absolutely right. However, the good news is that this is just the default page. You can actually query ACS for all configured Identity Providers and build a page that will send the right whr.

Now, any ideas on question #2? (reminder: who is responsible for issuing the claims a-Order needs: role, organization, etc?)