idp v3 - unsolicited sso failing
Cantor, Scott
cantor.2 at osu.edu
Sun Mar 15 13:23:00 EDT 2015
On 3/15/15, 12:00 PM, "Marc Boorshtein" <mboorshtein at gmail.com> wrote:
>It looks like the idp is looking for an authnrequest even though one doesn't exist. Is this a bug?
That's debateable. I don't know what V2 did/does in this case, but even if it "works", I could make a pretty strong case that the V2 behavior is the bug. I don't think I'm inclined to change this. If the metadata says the SP signs its requests, you shouldn't be able to circumvent that, it would make the feature worthless.
-- Scott
More information about the users
mailing list