Fail on resolved RequestedAttribute isRequired=true

[Cantor, Scott]

On 7/14/15, 10:55 AM, "Stefan Santesson" <stefan at aaa-sec.com> wrote:

>Another aspect/use of this is that the isRequired=true can be used by
>Discovery services to filter out IdP:s not capable of responding,
>preventing a request from being made at all.

I can't see how, a DS has no idea what an IdP will release. Even a list of raw attributes supported by the IdP doesn't really tell you in any specific case what would happen.

>This is probably how we will use it, if at all. The Discovery service can
>compare this with what it knows about EntityCategory attributes declared
>by the IdP.

That's a different sort of filtering I think, based on EntityAttributes.

-- Scott