Internation dateline issue

[Cantor, Scott]

On 1/22/13 8:51 PM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:

>So, for each member coming through this fed, I have to add a new relying
>party rule?  I can't match on .edu.au as other schools need to come in as
>private feds.

There's no way for the code to know what certificate it's supposed to use.

That's why this is such a bad model. When federations dictate credentials,
things don't work well.

But as I said, SAML 2 means no queries which means you don't need a
signing certificate. Unless you sign requests.

-- Scott