Sending AuthRequest without ACS

Cantor, Scott cantor.2 at osu.edu
Tue Nov 1 14:17:52 EDT 2016


> Yes, I understand that this is not feasible when sending responses with
> attributes etc. But is it illegal from the spec?

It's undefined in the *profile*. The IdP preconfigures the allowable bindings it supports in various directions. If you really wanted to get it to respond, yes, you could.

-- Scott



More information about the users mailing list