Handling 'dynamic' parameter in ACS url

[Maharaj, Sudhir]

Thanks much Scott. It's the response I feared... ;-)

We will not get 2.4 into production ahead of this integration.

Sudhir

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Tuesday, April 16, 2013 3:27 PM
To: Shib Users
Subject: Re: Handling 'dynamic' parameter in ACS url

On 4/16/13 3:22 PM, "Maharaj, Sudhir" <smaharaj at bu.edu> wrote:

>While it appears the vendor implementation might not be according to
>SAML2 spec, how best do you think to proceed to implement this 
>integration? Is there a way to 'wildcard' (for lack of a better term) 
>ACS or something similar? Anyone else have similar issue integrating 
>with vendor SAML2 implementations?

There isn't (and yes, it's basically not an appropriate thing to do), but
2.4 will include an option to bypass endpoint checks if the request message is signed. That would be a possible work-around for you.

The 2.4 release is likely to happen tomorrow.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net