computedID in idpv3
Paul B. Henson
henson at cpp.edu
Mon Feb 15 16:36:41 EST 2016
> From: Cantor, Scott
> Sent: Monday, February 15, 2016 1:03 PM
>
> ePTID is an abstraction. In SAML 2, it's intended expression is in the NameID,
> from whence the concept was derived. The terminology makes it impossible
> to tell what people really mean or expect, and that's one of the reasons for
> getting rid of it at this stage of things.
Hmm, so an SP could say they require the ePTID, but they are actually using the SAML2 persistent ID, and they would work fine without a literal ePTID defined or released? That's rather confusing <sigh>.
--
Paul B. Henson | (909) 979-6361 | http://www.cpp.edu/~henson/
Operating Systems and Network Analyst | henson at cpp.edu
California State Polytechnic University | Pomona CA 91768
More information about the users
mailing list