SAML1 CheckRequestVersionHandler ClassCastException ?

Tom Zeller tzeller at dragonacea.biz
Tue Jan 21 20:56:12 EST 2014


> IdP initiated requests aren't SAML messages, so they won't cast to that
> type, not in either version. In the 2.0 flow, the message decoder actually
> creates a SAML request as a mock stand-in for what the request contained,
> so it could be wired up with that action and not break, but there is no
> AuthnRequest to mock up in SAML 1.

So both the SAML 1 and 2 IdP initiated flows should not call
CheckRequestVersionHandler ?


More information about the dev mailing list