Opinions on SIDP-570?
Cantor, Scott
cantor.2 at osu.edu
Mon Feb 18 12:20:14 EST 2013
Issue filed here:
https://issues.shibboleth.net/jira/browse/SIDP-570
Basically it's asking us to look into exposing the entityID as the
"service name" for anonymous SPs for IdPs that are configured to allow
anonymous SPs.
My off-the-cuff reaction is, I don't like the idea of displaying anything
that might be interpreted as "reasonable belief of the IdP" about a
request when we have no such evidence.
OTOH, since we don't generally require signed requests from the SPs we do
know, that doesn't exactly scream consistency.
-- Scott
More information about the dev
mailing list