Signgo Ilex as IdP with Shibboleth SP

[Cantor, Scott]

> Scott, I guess things are different in the enterprise world where this is
> concerning. no reason for the customer's IdP to be reachable on the
> Internet.

There's no reason for it not to be, and I guarantee their users working from home think it's a stupid policy also.

> No reason for them to a user for me in their corporate active directory.

Not in general, but there is if they expect you to debug their IdP. Guest accounts for testing are a fairly typical thing to support.

> Regarding fixing the problem - I found two reports of different IdPs having
> this problem and fixing it in the IdP configuration level. I was asking
> about how the customer would fix this, not how I will fix it.

If it's a bug, we're not talking about a setting they change, the software source has to fix it. If there are IdPs that somehow optionally break SAML, that's a very odd setting to implement.

-- Scott