NIIF SLO Questions

[Cantor, Scott]

On 10/11/11 10:44 AM, "Paul Hethmon" <paul.hethmon at clareitysecurity.com>
wrote:
>
>From reading the SAML spec document, it says to me that their should be a
>final response to the initiating relying party. Figure 3 on page 33 of
>the SAML Profiles pretty much says that.

Just to the spec point, it is a requirement to issue a response, but my
expectation is that the UI would want to remain at the IdP (assuming the
initial request was front channel). So the response is rather like the
requests to the other SPs, invisible.

(The inability to pull that off without a lot of fragile hackery is the
main argument against all of it of course.)

-- Scott