SHIB_IDENTITY_PROVIDER

[Mike Flynn]

I use this value with over 20 other IdPs.  The same piece of code that reads that for all of those IdPs tries to read it for the IdP that I do not get the value from.  This makes NO sense to me now.


________________________________
From: "Cantor, Scott E." <cantor.2 at osu.edu>
To: "users at shibboleth.net" <users at shibboleth.net>
Sent: Thursday, July 28, 2011 3:19 PM
Subject: Re: SHIB_IDENTITY_PROVIDER

On 7/28/11 5:48 PM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:

>I meant to say should the IdP turn require sessions on?  It is turned on
>in my SP config.... <Path name="InCommon" authType="shibboleth"
>requireSession="true"/>

The IdP has nothing to do with what I was talking about. And if you have
that setting on, it is physically impossible for that variable to be
unset. It's certainly possible for specific code trying to read it to do
so incorrectly, but that would be invariant with the IdP. It would be
there, or not, for any IdP based on whether the code was correct.

So, I'm sorry, but it's not physically possible. I have no explanation.

The best I could suggest is to sanity check the IdP...do other SPs using
it properly reflect the value? If so, as I would assume, there's just no
way.

-- Scott

-- 
To unsubscribe from this group, send email to
users+unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20110729/52603415/attachment-0001.html