ACS Urls case sensitive?

Cantor, Scott cantor.2 at
Thu Aug 13 13:38:02 EDT 2015

On 8/13/15, 1:35 PM, "users on behalf of David Langenberg" <users-bounces at on behalf of davel at> wrote:

>Are ACS URLs supposed to be matched case-sensitive by IdPv3?  I have an SP who sent me metadata with ACS urls like
>https://Myspecialname.  When an AuthnRequest comes in with an ACS URL in it of
>https://myspecialname the IdP refuses to process it.  Is this intentional?

Yes, it's always been that way. SAML specifically allows it to avoid a requirement to canonicalize URLs, which is harder than reaching Pluto apparently (since we did that, and nobody's managed to correctly canonicalize URLs yet).

-- Scott

More information about the users mailing list