Using Metadata in my App

[Cantor, Scott]

On 3/26/13 10:47 AM, "Tom Scavo" <trscavo at gmail.com> wrote:
>
>I don't see how that's different than the first one above. Someone
>else more knowledgeable about the Shib SP will have to review.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPTargetedID

>All I can say for sure is the values supplied to the application do
>NOT come from metadata. They are asserted by the IdP just-in-time.

They're a mix. SAML allowed qualifiers in NameIDs to be defaulted based on
context. If they're not sent, they can be defaulted into existence based
on the identities of the issuer and the recipient. The former comes from
the SAML response (and by design is what's in the metadata), the latter
comes from the SP configuration.

-- Scott