Contexts and attribute operations

Rod Widdowson rdw at steadingsoftware.com
Mon Jan 6 06:43:26 EST 2014


Winding back to this conversation - I spent some time look at the Metadata
Filters which as previously discussed have a need to locate the
SAMLMetadataContext.

1) I propose we ditch all the Issuer-metadata related filters.  People can
write scripts if they need it.  We really do not want to have even the
suspicion of consuming our own metadata - the only use case I can construct
in my head for this would involve needing to look at someone else's view of
the IdP configuration which seems just plane broken.

2) At first blush it seems pretty simple to add a metadata context lookup
strategy (for the SP) to the remaining filters, but as I started to code
this I had second thoughts:  Are context hierarchies liable to ever change
on a per-flow basis?  (so for instance for flow 1 the SAMLMetadataContext is
a child of the profile context, but for flow 2 it is the child of the
profile context's parent).

This seems unlikely, but if it is then the navigation needs to describe
differently, so before I got too far down the line I thought I should check.

Rod



More information about the dev mailing list