Question about best practice regarding release of deprecated encodings

Peter Schober peter.schober at univie.ac.at
Wed Nov 11 02:29:23 EST 2015


* Cantor, Scott <cantor.2 at osu.edu> [2015-11-10 21:40]:
> But there is no reason I've ever run into why you'd send a SAML 1
> name in a SAML 2 response or vice versa (and be sending both at
> once). And that's about the only case where you'd be liable to
> trigger any issue at a (Shibboleth) SP. Even sending the *wrong*
> name doesn't actually break in many cases since the SP happens to be
> very (too) forgiving in its mappings. But you would never send
> both. That's just weird.

You'd also be missing a chance to get that SP fixed (if it indeed
required broken behaviour from your IDP, which is doubtful) and uphold
our community standards to the benefit of all -- including yourself.
-peter


More information about the users mailing list