SP credential in attribute query flow tests ?

[Cantor, Scott]

On 6/2/14, 2:16 PM, "Tom Zeller" <tzeller at dragonacea.biz> wrote:

>In the SAML 1 and 2 attribute query flow tests, if I comment-out
>adding the SP credential to the HTTP servlet request, the tests still
>pass, which is not what I expected. I thought that something in the
>flow would validate the SP certificate, but I guess not. Is that
>functionality not implemented or am I misunderstanding ?

I definitely saw it failing back when I ran my own tests, but those didn't
use the tests you built.

I'm not sure what you're commenting out, but that doesn't sound related to
the server side of the tests. The credential for the SP comes from the
metadata.

Where is the code you're turning off?

-- Scott