Sending AuthRequest without ACS
Rainer Hoerbe
rainer at hoerbe.at
Wed Nov 2 08:38:29 EDT 2016
> Am 01.11.2016 um 19:17 schrieb Cantor, Scott <cantor.2 at osu.edu>:
>
>> Yes, I understand that this is not feasible when sending responses with
>> attributes etc. But is it illegal from the spec?
>
> It's undefined in the *profile*. The IdP preconfigures the allowable bindings it supports in various directions. If you really wanted to get it to respond, yes, you could.
Thanks for the clarification. I just dropped the test case :-)
- Rainer
More information about the users
mailing list