Missing instrumented class in my tc-config.xml
cantor.2 at osu.edu
Wed Aug 8 14:10:04 EDT 2012
On 8/8/12 2:03 PM, "Wessel, Keith William" <kwessel at illinois.edu> wrote:
>Thanks so much, Scott. Since they're trying to use forcedAuth to do
>something it wasn't intended for, we'll let them handle the error.
Well, to be clear, any time you use IsPassive or ForceAuthn, or if you ask
for a specific AuthnContext, or NameID Format, those are the exact cases
where you *will* get errors in the SAML layer back. So you're basically
forced to implement more advanced error handling in those cases unless
you're very "tight" with the IdP.
When you leave it all open, then you can get away with saying any true
error is an exceptional case that doesn't have to be so pretty.
More information about the users