Validation problem <md:EmailAddress/>

[Cantor, Scott]

On 1/10/14, 9:43 AM, "Magnus Berglund" <magnus.berglund at unikum.net> wrote:

>I have problem to validate IDP metadata that includes empty email
>addresses.

Because that's not valid SAML.

>Can I some how change the validator to accept the empty emailAddress
>element. I still want to be able to dynamically fetch the metadata and I
>am not able to convince the federation operator to update the metadata.

You can't, the SP will not accept metadata that violates constraints it
knows how to check for. Your federation operator is not behaving
appropriately [1].

-- Scott

[1] See, I can be tactful.