SP ACS extra query string parameter rejected by IdPv3, not rejected by IdPv2
Tom Scavo
trscavo at gmail.com
Sat Mar 12 12:47:41 EST 2016
On Sat, Mar 12, 2016 at 12:17 PM, Waldbieser, Carl
<waldbiec at lafayette.edu> wrote:
>
> Which behavior is correct? IdPv2 being tolerant of the extra parameter, or IdPv3 rejecting it?
I would say the latter. AFAIK, SAML software typically does a strict
string match against what's in metadata. My guess is that V2 is
ignoring the query string altogether. The SAML spec appears to be
silent regarding this question.
Tom
More information about the users
mailing list