using something other than entityID to identify SP to IdP
liamr at umich.edu
Wed Dec 16 14:05:30 EST 2015
On Wed, Dec 16, 2015 at 2:02 PM, Peter Schober <peter.schober at univie.ac.at>
> That's all you got, really: If there's nothing in the SAML protocol
> message and you don't trust the browser (you shouldn't, of course; the
> scenatio of course depends on what different behaviour you intend to
> display on guessing at the SP that way) what else could there be?
I didn't think there was. I needed a sanity check.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the users