Metadata support: EntitiesDescriptor/@Name handling

Rod Widdowson rdw at steadingsoftware.com
Sat Aug 17 06:07:57 EDT 2013


I just added IDP-309 to capture the IdP work item to do whatever is needed
in the filters to match OpenSAML.

> As a recommendation, what I'm saying is that we'd be telling people to
> rely on entity attributes going forward and migrate their dependency on
> the old group approach to that one.

One open question is whether it is worth throwing in a log.warn in the
spring parsing when it meets one of these filters?  I can see the value but
it may become aggravating to some users to see these when there's little
they can do about it.  AFAIR SWITCH use these a lot (and their use is/was
hierarchical) so all their users would end up getting warning on a regular
basis.

Do we need to start talking to the [big] federations about this?

Rod



More information about the dev mailing list