A Deployer's View of Federated Identity