Releasing same NameID to all service providers
Alex Olson
ako at byu.edu
Wed Mar 18 14:30:17 EDT 2015
Is there a significant vulnerability in releasing a standard persistent nameID (like a uid) that is the same to all service providers? Or, what benefits are there to using something like a StoredID to generate a NameID vs. a persistent NameID that is the same?
--
Alex K. Olson
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150318/ac2d2789/attachment.html
More information about the users
mailing list