Shib IdP 2.3.5 + ECP

[Chad La Joie]

On 11/23/11 10:08 AM, Cantor, Scott wrote:
> On 11/23/11 10:01 AM, "Chad La Joie" <lajoie at shibboleth.net> wrote:
> 
>> Sure, I wasn't expecting the SP to magically know.  I assumed there
>> would be one session initiator for "normal" requests and another for
>> passive requests that was used by the client.  But that supposes the
>> SP/client have agreed to use lazy sessions, so that might be assuming
>> too much.
> 
> It also assumes that every SP can do the same kind of thing, and we don't
> want to build the IdP with that assumption.

As far as I can tell, the problem is that a request is coming in, it's
not marked as isPassive but the client isn't able to handle a UI.  If
that's the case the IdP is never going to be able to handle that.

In this particular case, it might be that any client capable of ECP is
going to be non-browser so all ECP requests can just blindly be tagged
as isPassive.  Not a general solution but it might deal with the current
issue.