Research and Scholarship and filter by relying party

Tom Scavo trscavo at gmail.com
Tue Mar 4 16:30:45 EST 2014


On Tue, Mar 4, 2014 at 4:24 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 3/4/14, 4:18 PM, "Jeffrey Crawford" <jeffreyc at ucsc.edu> wrote:
>>
>>Well okay so if an SP doesn't even get NamedID it's supposed to handle
>>that?
>
> Yes, as a matter of basic input validation.

But even so, one could always assert Transient or Persistent NameIDs,
right? Or am I missing something?

>>It doesn't look like Metadata Filtering is going to help in this case so
>>It's starting to look like I'm going to have to change from relying-party
>>based to filter based.
>
> I don't see any reason why filtering isn't exactly the solution. You don't
> even need to write Java code, you could build a cron job to pull in
> metadata and run it through an XSLT script.

You mean like the script attached to this page:

https://spaces.internet2.edu/x/BoOVAQ

(Scott wrote this script, btw :)

Tom


More information about the users mailing list