putmanb at georgetown.edu
Thu Dec 10 14:10:10 EST 2015
On 12/10/15 1:47 PM, kripp wrote:
> I misread the documentation at
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPPolicyRule. I
> thought by adding <PolicyRule type="OneTimeUse"/> it would accept the
No, it doesn't say that. I don't see that anywhere on that page.
> but it doesn't appear to be working. Is there anyway to add a
> PolicyRule so that this will be taken?
What the wiki says is you can *ignore* that condition, or any condition
specified by QName, with a PolicyRule child element like:
Note that the type attrib is "Ignore:, not "OneTimeUse".
Ignoring may not be what you want, but that should at least allow the
SP to accept what the IdP is sending. Maybe that's good enough for
> It doesn't appear the post below was
> ever answered.
Actually it was. There's 2 responses there from Peter Schober and
Scott Cantor. Click on "Next Message". Don't know if there's supposed
to be a "next in thread" link in this mail archive site, but if you
click "Messages sorted by" -> "thread", you'll see them.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the users