RelyingParty communication profiles

Peter Schober peter.schober at univie.ac.at
Mon Apr 8 17:09:05 EDT 2013


* Tompkins,Charles R <crt at ufl.edu> [2013-04-08 22:47]:
> Are the communication profiles configured in the Default Relying Party 
> completely seperate from profiles configured in a subsequent, specified 
> relying party in terms of any interaction/conflict/precedence of comm 
> profile?  As I read it, they appear to be independent of each other the 
> moment I define a specific relying party, but I wanted to be sure.

I would think so.

> For example, will specified relying parties be able to use
> communication profiles defined in the default relying party that
> aren't defined in it's own stanza?

No. If e.g. there's no
<rp:ProfileConfiguration xsi:type="saml:ShibbolethSSOProfile">
defined for a specific relying party that RP should not be able to
comminicate via that profile.
Having the <rp:ProfileConfiguration> for a specific type defined the
rest of the attributes on that element (assertionLifetime etc.) are
defaulted, though.
-peter


More information about the users mailing list