[JIRA] Commented: (SIDP-517) Wrong Treatment of ResponseLocation and Location in Metadata

[Chad La Joie (JIRA)]

    [ https://issues.shibboleth.net/jira/browse/SIDP-517?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13648#comment-13648 ] 

Chad La Joie commented on SIDP-517:
-----------------------------------

Found it.  It's: http://groups.google.com/group/shibboleth-users/browse_thread/thread/6dfcc1334bb03ef3/abe61f86bf708095

> Wrong Treatment of ResponseLocation and Location in Metadata
> ------------------------------------------------------------
>
>                 Key: SIDP-517
>                 URL: https://issues.shibboleth.net/jira/browse/SIDP-517
>             Project: Shibboleth IdP 2 - Java
>          Issue Type: Bug
>          Components: SAML 2
>    Affects Versions: 2.3.0
>         Environment: CentOS 5.6, Tomcat 6.0.29, Apache 2.2.3-45.el5
>            Reporter: maxhhh at idp.protectnetwork.org
>            Assignee: Chad La Joie
>            Priority: Minor
>             Fix For: 2.3.4
>
>
> If metadata of an SP for the SAML2 HTTP-POST ACS at the IdP contains both Location and ResponseLocation attribute, this makes the IdP select and check for the ACS URL of the ResponseLocation but redirect the message to the Location address.
> Scott said that "that would be a bug. The check has to be against the location actually used, and when you set a ResponseLocation, the Location should simply be ignored."

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira