[JIRA] Created: (TS-7) Consider additional check on metadata content

Chad La Joie (JIRA) noreply at shibboleth.net
Tue Dec 6 13:59:25 GMT 2011


Consider additional check on metadata content
---------------------------------------------

                 Key: TS-7
                 URL: https://issues.shibboleth.net/jira/browse/TS-7
             Project: TestShib
          Issue Type: Task
            Reporter: Chad La Joie
            Assignee: Chad La Joie
            Priority: Minor


Ian's metadata validation scripts flags some current testshib registered entities with the following issues.  We should consider whether what we want to do within the app.

* Shibboleth 1.x auth request needs urn:oasis:names:tc:SAML:1.1:protocol in IDPSSODescriptor/@protocolSupportEnumeration
* SP excludes SAML 2 name identifier formats
* KeyDescriptor contains more than one X509Certificate
* SP SSO Descriptor lacking KeyDescriptor
* SAML 2 SP has no encryption key
* Shibboleth 1.x/SAML1/SAML2 support claimed but no appropriate service binding
* RequestedAttribute uses NameFormat of urn:oasis:names:tc:SAML:2.0:attrname-format:basic: unsuitable for cross-domain use
* IdP excludes SAML 2 transient name identifier format


--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the commits mailing list