AttributeScopeMatchesShibMDScope

Peter Schober peter.schober at univie.ac.at
Thu Oct 27 14:57:36 BST 2011


* Kristof Bajnok <bajnokk at niif.hu> [2011-10-27 14:03]:
> what's the intention, should AttributeScopeMatchesShibMDScope evaluate 
> to true when there is no shibmd:Scope extension in the 
> IdPSSODescriptor's metadata? According to one of our recent issues, if 
> the other party (mis?)places the Scope element into the 
> EntityDescriptor, it seems to evaluate to false. If I remember 
> correctly, it was the same when there was no Scope element.
> 
> I would think that default SP configuration shouldn't require the 
> proprietary metadata extensions favouring interoperability. It's the 
> role of the federation to mandate the use of Scopes. However, I accept 
> that there are valid reasons for enforcing the scopes from software.

The "proprietary metadata extensions" is necessary for the
"proprietary" (eduPerson-defined) scoped attributes to make any sense,
IMO.
WOuldn't interoperability be better achieved by correct use of the
extension in metadata?
-peter


More information about the users mailing list