AttributeScopeMatchesShibMDScope

[Cantor, Scott]

On 9/12/11 5:15 PM, "Liam Hoekenga" <liamr at umich.edu> wrote:

>InCommon has allowed our IdP to assert three different scopes..
>
>         <shibmd:Scope regexp="false">umich.edu</shibmd:Scope>
>         <shibmd:Scope regexp="false">umd.umich.edu</shibmd:Scope>
>         <shibmd:Scope regexp="false">flint.umich.edu</shibmd:Scope>
>
>Our scopes then fail "saml:AttributeScopeMatchesShibMDScope".

Not to my knowledge.

>So... if it's permissible in the metadata, shouldn't it pass
>saml:AttributeScopeMatchesShibMDScope?

Yes, and does last I checked it. Since the UK uses lots of scopes, I'm
pretty sure a bug would have been reported by now.

-- Scott