which scope for AD domain OTHER THAN default one?

[Cantor, Scott]

On 3/25/13 9:01 PM, "Mauro Minella" <Mauro.Minella at microsoft.com> wrote:

>Which scope will this iDP assert?

Well, that's policy. You need metadata that contains the scopes that are
needed for the identifier namespaces you're planning to use. That has
nothing directly to do with anything but what it specifically refers to,
the domain-like suffixes applied to scoped attributes.

>In fact, if I write contoso.com as AD Domain name and fabrikam.com for
>scope, I get the following error in testshib:

You can't have empty elements. If you're relying on something to generate
metadata, that something has a bug.

>2013-03-25 20:47:53 ERROR OpenSAML.MetadataProvider.XML : metadata
>instance failed manual validation checking: Scope must have TextContent.

That's meant to tell you where the problem is.

-- Scott