AttributeScopeMatchesShibMDScope

[Ian Young]

On 13 Sep 2011, at 20:21, Liam Hoekenga wrote:

> If I configure the test sp to use my local federation metadata,  
> scoping is broken.
> 
>     http://www-personal.umich.edu/~liamr/UMich-metadata.xml

Is this something extracted from your local federation metadata?

> Something in my federation's metadata has to be off, and I can't  
> figure out what it is.  I've looked at the EntitiesDescriptor tag for  
> both InCommon and the UK federation.  Mine looks ok.  I'm stumped.

I ask because the file you reference there seems to be a single EntityDescriptor, not an EntitiesDescriptor.

The main significant thing I'd note about it in the area of scopes is that it has whitespace in the scopes.  Simplifying:

<Scope>
like.this</Scope>

That's unusual, and the first file you reference doesn't do that.  So, although I can't see why it would make things not work, it *is* a difference.

	-- Ian



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3725 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20110913/d98c28f1/attachment.bin