Sending AuthRequest without ACS

Rainer Hoerbe rainer at hoerbe.at
Wed Nov 2 08:38:29 EDT 2016


> Am 01.11.2016 um 19:17 schrieb Cantor, Scott <cantor.2 at osu.edu>:
> 
>> Yes, I understand that this is not feasible when sending responses with
>> attributes etc. But is it illegal from the spec?
> 
> It's undefined in the *profile*. The IdP preconfigures the allowable bindings it supports in various directions. If you really wanted to get it to respond, yes, you could.

Thanks for the clarification. I just dropped the test case :-)

- Rainer


More information about the users mailing list