Shib IdP 2.3.5 + ECP

Cantor, Scott cantor.2 at
Wed Nov 23 15:08:48 GMT 2011

On 11/23/11 10:01 AM, "Chad La Joie" <lajoie at> wrote:

>Sure, I wasn't expecting the SP to magically know.  I assumed there
>would be one session initiator for "normal" requests and another for
>passive requests that was used by the client.  But that supposes the
>SP/client have agreed to use lazy sessions, so that might be assuming
>too much.

It also assumes that every SP can do the same kind of thing, and we don't
want to build the IdP with that assumption.

Once it's built-in to V3, for now I would just make sure there's an
override mechanism for which profile handlers are interrupted by uApprove,
or maybe some kind of profile handler indicator that it looks at and
decides whether to jump in or not.

-- Scott

More information about the users mailing list