Fail on resolved RequestedAttribute isRequired=true

[Tom Scavo]

On Wed, Jul 15, 2015 at 4:02 AM, Stefan Santesson <stefan at aaa-sec.com> wrote:
>
> In our government federation we offer a centralised DS.
> The goal of this DS is to never show an IdP that is known not to work with
> the requesting SP.

This is a laudable goal.

> The DS will have a well defined set of algorithms for filtering IdP:s.

I would like to study those algorithms.

> This allows SP:s to configure their metadata so only relevant IdP:s will
> show up in the DS.

The metadata an SP consumes and the IdPs exposed on its discovery
interface are two completely different things. So I'm missing an
important detail: How do the DS and the SP coordinate to filter the
same set of IdPs?

Thanks,

Tom