Help configuring custom relying party for a relaystate url

Cantor, Scott cantor.2 at osu.edu
Tue Aug 20 14:11:31 EDT 2013


On 8/20/13 2:03 PM, "Ian Rifkin" <irifkin at brandeis.edu> wrote:
>
>Can you explain this a little more? Most of the SP (vendors) I've worked
>with so far supplied metadata, but the other day I had one that didn't. I
>just created an AttributeFilterPolicy with their entity ID and things
>worked fine. What is the reason/benefit of creating metadata for them?

That isn't possible unless you enabled anonymous RP support. Without
metadata it won't work.

>I want to make sure I'm not causing a security concern or missing out on
>a feature or something else. I could create a very basic metadata file
>for this SP, but I'm not sure what that will actually do.

If you don't care about controlling which SPs actually use the IdP, then
you don't necessarily need metadata, but then there are attribute release
considerations.

-- Scott




More information about the users mailing list