Thread safety in custom claims providers

Hello, I’m the author of open source claims provider LDAPCP (http://ldapcp.codeplex.com/) and I recently discovered a very important design constraint that causes serious issues if ignored: Claims providers are mostly called by static class SPClaimProviderOperations (actually I think it’s the only class that can call them). This class and its methods are static, which implies…