Is this a metadata error?

[Peter Schober]

* Ian Young <ian at iay.org.uk> [2013-05-23 18:12]:
> On 23 May 2013, at 17:03, "David Gersic" <dgersic at niu.edu> wrote:
> > I could be wrong, but I think that's where this is going wrong. The metadata should have "https://niu.universitytickets.com" in it, not "https://NIU.UniversityTickets.com".
> 
> The location the the SP tells the IdP to return the response to
> needs to match exactly the location described in the metadata.  The
> two values must be consistent, in other words, and as you've
> observed that isn't the case at present (lower case vs. mixed case).
> They will need to change one or the other value; the most obvious
> one to change would be the mixed case one, which is unconventional.

While I haven't fully digested RFC4343 et al. and looked into possible
consequences for IDN (or whether SAML has its own rules for
establishing sameness of FQDNs) one could also consider this a
software issue since generally DNS labels (parts that make up FQDNs)
are not defined to be case sensitive.

Of course it's both easier and more sensible for the system to just
canonicalize its own name and be done with it.
-peter