Radio buttons instead of a list box in the embedded DS?

[Cantor, Scott]

> What was the driver for not doing endpoint validation in the EDS? Lack of
> demand? Complexity? I know it was intended to be embedded into an SP,
> thus reducing the need for it. But if it's not complex, I wonder how easily I
> could add it?

Rod had to ask me, and I don't remember making a conscious decision about it, but I don't think it really would have made sense. It's not a CDS, and the feed it loads is only IdP information.

For the target scenario, a whitelist or the relative URL trick would have made sense, but I don't think it's really practical to do much else.

> I was holding off on hacking the metadata
> loading to pull in discoveryResponse endpoints and on hacking the discovery
> page to check them, but that might also now be an option.

It's not just pulling in a missing piece of data, it's that the EDS doesn't know anything about SPs at all. In effect you'd be generating a whitelist from the metadata, so I think it just needs to be extended to support some kind of whitelisting.

-- Scott