Radio buttons instead of a list box in the embedded DS?

[Cantor, Scott]

> I got this working with SimpleSAMLphp with very minimal changes, but SSP
> won't validate the return endpoint against metadata. It only gives the option
> of a select set of hostnames being in the return param which won't work
> with the hundreds of SPs we have, and with that turned off, it opens up the
> DS to phishing attacks.

Well, neither does the EDS. Rod asked me to point that out, he's not online to respond.

We didn't really give that a huge amount of thought, because that CDS capability was not viewed all that favorably by people and doing it in the EDS wasn't as simple.

I think we should have implemented a whitelist capability in it, and I think we will, but in the meantime, I think that wasn't obvious to you.

-- Scott