EncryptedKey placement configuration

[Cantor, Scott]

On 5/13/14, 9:04 PM, "Brent Putman" <putmanb at georgetown.edu> wrote:
>
>Off-hand the only way I could see to make it work is if we introduced
>some kind of extensible config options and associated params, and some
>sort of plugin mechanism on the resolvers to handle them.  But that seems
>like a lot of work.

Yeah, I thought maybe if the SAML encryption resolver subclass could
create a subtype of EncryptionParams that might work, but it's not
structured to do that now.

>I definitely agree it should be configurable somewhere, though.  Either
>on the action .. or maybe it's a SAML profile config option?

I was hoping not, but I suspect if it's ever needed, it would be for an
interop purpose, so that's where it would have to be.

-- Scott