scope checking at the SP

[Tom Scavo]

Does the SP "scope-check" values of SAML2 Persistent NameID (or
eduPersonTargetedID)? That is, does the SP ensure the NameQualifier is
equal to the Issuer? If so, can this be relaxed on a per-IdP basis?

I searched for "NameQualifier" in the wiki and am led to believe the
"scope-check" above was enabled by default in SP 2.4 but it appears to
be all or none. If so, I'm not sure why the SP treats ePTID different
than ePPN (e.g.). I know in the latter case, scope checking can be
relaxed on a per-IdP basis (a needed feature for IdP Proxies, e.g.).

Thanks,

Tom