Recursive entityID Lookup in LocalMetadata EntitiesDescriptors

Nate Klingenstein ndk at signet.id
Tue Apr 2 09:29:33 EDT 2019


All,

From experiences on SAMLtest where a tester wrapped their EntityDescriptor in an EntitiesDescriptor element, the IdP was unable to locate the metadata for that provider.  Removing the EntitiesDescriptor parent allowed the lookup to succeed.

While it's unusual for a metadata file hosted on disk to contain multiple entities, I can imagine use cases where this would be done.  Is it reasonable for the IdP to iterate through the EntitiesDescriptor's EntityDescriptor entityID's?

Thanks in advance,
Nate.


More information about the dev mailing list