idp v3 - unsolicited sso failing

Cantor, Scott cantor.2 at osu.edu
Sun Mar 15 13:23:00 EDT 2015


On 3/15/15, 12:00 PM, "Marc Boorshtein" <mboorshtein at gmail.com> wrote:

>It looks like the idp is looking for an authnrequest even though one doesn't exist.  Is this a bug?

That's debateable. I don't know what V2 did/does in this case, but even if it "works", I could make a pretty strong case that the V2 behavior is the bug. I don't think I'm inclined to change this. If the metadata says the SP signs its requests, you shouldn't be able to circumvent that, it would make the feature worthless.

-- Scott



More information about the users mailing list