Dynamic Metadata and Artifacts

[Cantor, Scott]

On 11/9/17, 11:54 AM, "dev on behalf of Rod Widdowson" <dev-bounces at shibboleth.net on behalf of rdw at steadingsoftware.com> wrote:

> The case I'm thinking is the "standard" one.  

I understand the race condition, I was trying to say that I don't know configuration-wise and runtime-wise when it can tell that it's requesting a lookup by artifact in a way that might not be kosher (i.e. not an actual MDQ query).

E.g., if it's told to do well-known direct lookup, that's always a failure.

>  The other case is that there may be some magical profile in which an SP sees an artifact having not seen stages (1) and (2).

That's easy to trigger, it's IdP-initiated SSO.

-- Scott