delegation in IDP3

[Cantor, Scott]

> Apparently the schema is different for the v3 port.

Hmm, you're right, I'm wrong. I guess the schema was changed. Or more to the point, the old type in the extension schema was added to the SAML relying-party schema that the IdP comes with for all the other profiles. Strange choice, I don't remember us deciding to do that, it seems odd to me.

Anyway, I do see a SAML2SSOSProfile type in the "urn:mace:shibboleth:2.0:relying-party" namespace. But sure enough, I don't see a mapping in the code to handle that type. I think it's a bug. But it may be the bug was actually that we added it to the schema at all, Brent would have to comment there.

The general line we took is that anything that wasn't part of the V2 code base wouldn't be accounted for in the legacy relying-party support, and would require migrating to the native version. This is straddling the fence, but is to my mind something I would have argued was on the extension side and would not have been supported.

-- Scott