allowCreate false on authnRequest

[Cantor, Scott]

On 1/15/14, 10:50 AM, "Rudy Bruns" <rudy.bruns at qiy.nl> wrote:

> 
>We are using Shibboleth as a SP using an external IDP. This IDP uses a
>persistent NameIDFormat. We want the SP to sent an AuthnRequest with the
>allowCreate property set to ³false² instead of ³true².

AllowCreate is something that was very unfortunate and shouldn't have been
in the standard at all. Why do you think you need to change it?

>Where can we configure this? Can we configure this?

No. If you want to change it, you have to supply a complete AuthnRequest
template into the configuration and in turn replace the shorthand
configuration with the very ugly and unwieldy old way of explicitly
creating a SessionInitiator.

In other words, don't. Just don't. Not for this.

-- Scott