Shibboleth SP with Novell NAM IDP

[Chad La Joie]

It is not valid according to the specification, however.  There are
some things that XML schema can't really express very well and so some
requirements are simply given by exposition of the spec.  In this
case, the requirement that the top level element of a metadata
document be wither an EntitiesDescriptor or EntityDescriptor.

On Mon, Sep 24, 2012 at 7:37 AM, Peter Schober
<peter.schober at univie.ac.at> wrote:
> * Peter Schober <peter.schober at univie.ac.at> [2012-09-24 13:31]:
>> * EMP <emp618 at internode.on.net> [2012-09-24 13:12]:
>> > Leads me to believe the IDP Metadata is screwy, so looking at that I see -
>> >
>> > <md:IDPSSODescriptor
>>
>> That's not valid SAML2.0 metadata.
>> https://wiki.shibboleth.net/confluence/display/SHIB2/MetadataCorrectness
>> (You're missing the enclosing EntityDescriptor.)
>
> I misspoke, it's well-formed and schema valid. But without the
> EntityDescriptor you're missing the entityID and the IdP looks up
> metadata via that,
> -peter
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net



-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered