"entity" nameid format

Cantor, Scott cantor.2 at osu.edu
Wed Sep 9 10:48:51 EDT 2015


On 9/9/15, 10:45 AM, "users on behalf of Liam Hoekenga" <users-bounces at shibboleth.net on behalf of liamr at umich.edu> wrote:

>Looking at the spec, it seems like "entity" isn't really for user principals.

It's not, it was a unification of the naming scheme to incorporate system entities and so that one could make assertions about them. Anything named with that format is something you could plausibly create metadata for. A user is not in that category.

>Is this another poorly behaved SP?  or is this a valid use?

Not for human subjects. A system could be something that authenticates to an IdP, certainly, though it's not a typical case.

-- Scott



More information about the users mailing list