ACS Urls case sensitive?

[Cantor, Scott]

On 8/13/15, 1:35 PM, "users on behalf of David Langenberg" <users-bounces at shibboleth.net on behalf of davel at uchicago.edu> wrote:


>Are ACS URLs supposed to be matched case-sensitive by IdPv3?  I have an SP who sent me metadata with ACS urls like
>https://Myspecialname.  When an AuthnRequest comes in with an ACS URL in it of
>https://myspecialname the IdP refuses to process it.  Is this intentional?

Yes, it's always been that way. SAML specifically allows it to avoid a requirement to canonicalize URLs, which is harder than reaching Pluto apparently (since we did that, and nobody's managed to correctly canonicalize URLs yet).

-- Scott