As Alex said: > Note that CoCo has two parts. SPs can assert the Data Protection Code of Conduct; IdPs can support the Code. I think we've only covered the SP part. So we should also add the IdP part (Entity Category Support value)