IdP 2.1.3 to 2.3.3 SPNameQualifier error

[Cantor, Scott]

On 10/11/11 2:00 PM, "Christopher Bongaarts" <cab at umn.edu> wrote:

>Upgraded my old 2.1.3 IdP in test to the latest 2.3.3.  Seems to work OK
>for Shib SPs, but for at least one provider I'm getting an error now
>when it had worked before (with identical configuration).

That's a bug fix in the IdP, and a bug in Service-Now. Discussed to some
degree in recent threads along with some of their other bugs.

You can get S-N to stop sending the qualifier, which it gets wrong, and
which isn't needed. You can also hack around it by feeding an
AffiliationDescriptor to the IdP that tells it to accept that qualifier
for that SP.

-- Scott