Allowing the Metadata to determine end-points

Peter Schober peter.schober at univie.ac.at
Wed Jan 27 15:38:18 EST 2016


* Cantor, Scott <cantor.2 at osu.edu> [2016-01-27 15:55]:
> Not sending it just tells the IdP to use the isDefault="true"
> endpoint in metadata, so it's equivalent.

Sorry, I confused myself there. I was thinking about signed request
with an ACS URL replacing unsigned requests with ACS URLs /and/
verification of the requested ACS URL via Metadata. No relation to a
discussion about not sending the ACS URL in the request, sorry.
-peter


More information about the users mailing list