ServiceTagSupport: the URL contained an invalid scheme

[Ian Young]

On 16 May 2013, at 11:03, Peter Schober <peter.schober at univie.ac.at> wrote:

> The SAML metadata schema defines
>  <element name="EmailAddress" type="anyURI"/>
> and an URI needs a schema.

The scheme component is actually only required in an absolute URI; although the specification does require an absolute URI here there is unfortunately no way to say that in the XML Schema language.  So, the requirement at the schema level is weaker than the spec's requirement.

This means that performing XML Schema validation alone does not pick up this kind of problem.  I've seen other similar cases; for example an InformationURL value of www.example.com is schema-valid but not conformant with the specification; it can cause the same kind of interoperability problems, too.

> "info at redi-bw.de" does not have a URI
> scheme, i.e. it's an invalid value for the EmailAddress element in the
> SP's metadata.the "mailto:info at redi-bw.de" would be correct.

This is true.

> Seems all EmailAddress values in DFN-AAI metadata have schema-invalid
> values.

Quite a lot of metadata worldwide still has this issue (of being schema-valid but not conformant).  I suspect we'll start to see that being corrected now that some software actually uses the values.

   -- Ian (on vacation, but it's raining)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4818 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20130516/a52d526e/attachment.bin