delegation in IDP3

[Robert A Basch]

Brent's message from a while back that I cited earlier explicitly
mentioned looking at the schema (in the absence of documentation)
to figure out how to do this in a legacy file, so I inferred that
the intent, at least, was to support this in a legacy configuration.

Bob


> On Jun 9, 2016, at 3:10 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
>> Apparently the schema is different for the v3 port.
> 
> Hmm, you're right, I'm wrong. I guess the schema was changed. Or more to the point, the old type in the extension schema was added to the SAML relying-party schema that the IdP comes with for all the other profiles. Strange choice, I don't remember us deciding to do that, it seems odd to me.
> 
> Anyway, I do see a SAML2SSOSProfile type in the "urn:mace:shibboleth:2.0:relying-party" namespace. But sure enough, I don't see a mapping in the code to handle that type. I think it's a bug. But it may be the bug was actually that we added it to the schema at all, Brent would have to comment there.
> 
> The general line we took is that anything that wasn't part of the V2 code base wouldn't be accounted for in the legacy relying-party support, and would require migrating to the native version. This is straddling the fence, but is to my mind something I would have argued was on the extension side and would not have been supported.
> 
> -- Scott
> 
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net