empty scope
Leif Johansson
leifj at sunet.se
Wed Aug 12 09:01:54 EDT 2015
On 2015-08-12 13:28, Ian Young wrote:
>
>> On 12 Aug 2015, at 12:23, Leif Johansson <leifj at sunet.se> wrote:
>>
>> I recently ran into metadata that contained an empty Scope element
>> (<shibmd:Scope/>). This should be legal according to the schema since
>> the empty string is a valid xs:string but reasonably modern shib SP
>> b0rks at it.
>>
>> It seems reasonable to not allow an empty scope but I can't find
>> where it is explicitly disallowed in the Scope extensions spec.
>
> The rule to apply is the general one saying that SAML elements can't be empty.
>
> -- Ian
got a reference?
More information about the users
mailing list