NIIF SLO Questions

[Paul Hethmon]

On 10/11/11 10:49 AM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:


>>From reading the SAML spec document, it says to me that their should be a
>>final response to the initiating relying party. Figure 3 on page 33 of
>>the SAML Profiles pretty much says that.
>
>Just to the spec point, it is a requirement to issue a response, but my
>expectation is that the UI would want to remain at the IdP (assuming the
>initial request was front channel). So the response is rather like the
>requests to the other SPs, invisible.
>
>(The inability to pull that off without a lot of fragile hackery is the
>main argument against all of it of course.)

That just seems contrary to the diagram, though not necessarily the
wording of the document.

Paul