Modify tag issuer in LogoutRequest

Cantor, Scott cantor.2 at osu.edu
Mon Nov 7 11:46:33 EST 2016


> The Issuer remains the entityID, but we are asked to add 2 attributes to the
> Issuer (I don't understand know the reason, actually): Format and
> NameQualifier.

This appears to be (as Dave said) the same misguided Italian federation (pretty sure it can't be GARR? the higher ed one?) asking you to violate the SAML specification.

The Format MUST be either absent or set to (constant is elided, I'm not looking it up) "urn:oasis....:entity" and NameQualifier MUST NOT be set when you're using that Format.

I suggest both of you ask whoever it is that's doing this to engage me in a conversation so I can explain to them why they are wrong. I wrote the standard, they can take my word for it.

-- Scott



More information about the users mailing list