[JIRA] Created: (SIDP-517) Wrong Treatment of ResponseLocation and Location in Metadata

[maxhhh@idp.protectnetwork.org (JIRA)]

Wrong Treatment of ResponseLocation and Location in Metadata
------------------------------------------------------------

                 Key: SIDP-517
                 URL: https://issues.shibboleth.net/jira/browse/SIDP-517
             Project: Shibboleth IdP 2 - Java
          Issue Type: Bug
          Components: SAML 2
    Affects Versions: 2.3.0
         Environment: CentOS 5.6, Tomcat 6.0.29, Apache 2.2.3-45.el5
            Reporter: maxhhh at idp.protectnetwork.org
            Assignee: Chad La Joie
            Priority: Minor


If metadata of an SP for the SAML2 HTTP-POST ACS at the IdP contains both Location and ResponseLocation attribute, this makes the IdP select and check for the ACS URL of the ResponseLocation but redirect the message to the Location address.

Scott said that "that would be a bug. The check has to be against the location actually used, and when you set a ResponseLocation, the Location should simply be ignored."



--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira