AttributeScopeMatchesShibMDScope
Peter Schober
peter.schober at univie.ac.at
Thu Oct 27 14:57:36 BST 2011
* Kristof Bajnok <bajnokk at niif.hu> [2011-10-27 14:03]:
> what's the intention, should AttributeScopeMatchesShibMDScope evaluate
> to true when there is no shibmd:Scope extension in the
> IdPSSODescriptor's metadata? According to one of our recent issues, if
> the other party (mis?)places the Scope element into the
> EntityDescriptor, it seems to evaluate to false. If I remember
> correctly, it was the same when there was no Scope element.
>
> I would think that default SP configuration shouldn't require the
> proprietary metadata extensions favouring interoperability. It's the
> role of the federation to mandate the use of Scopes. However, I accept
> that there are valid reasons for enforcing the scopes from software.
The "proprietary metadata extensions" is necessary for the
"proprietary" (eduPerson-defined) scoped attributes to make any sense,
IMO.
WOuldn't interoperability be better achieved by correct use of the
extension in metadata?
-peter
More information about the users
mailing list