using something other than entityID to identify SP to IdP

Liam Hoekenga liamr at
Wed Dec 16 14:05:30 EST 2015

On Wed, Dec 16, 2015 at 2:02 PM, Peter Schober <peter.schober at>

> That's all you got, really: If there's nothing in the SAML protocol
> message and you don't trust the browser (you shouldn't, of course; the
> scenatio of course depends on what different behaviour you intend to
> display on guessing at the SP that way) what else could there be?

I didn't think there was.  I needed a sanity check.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list