IdP session for client with private IP

[Cantor, Scott]

> I'm trying to guess what effect that change (clients using a different IP
> address to IdP and SP) will have.  The following suggests that at least some
> SPs will be using the default setting to check and refuse to create an SP
> session.

It is true that any number of them may, but that setting only defaults to true now in the sense that it is true if absent. The files shipped with the software have for many releases now set it to false explicitly because that's what the community preferred.

But I would not by any means suggest that nothing will break; some things will. You will not know which unless you test things ahead of time, of course.

-- Scott