R: Modify tag issuer in LogoutRequest

[Marcello Marangio]

Could you please explain?
The modification I would like to have is compliant to the SAML2 specs.

<saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity"
NameQualifier="http://SP.it">SERVICE_PROVIDER_WWW</saml:Issuer>

It is a valid saml2 Issuer element.

Am I missing something?

M


-----Messaggio originale-----
Da: users [mailto:users-bounces at shibboleth.net] Per conto di Dave Perry
Inviato: lunedì 7 novembre 2016 17:41
A: Shib Users
Oggetto: RE: Modify tag issuer in LogoutRequest

Something similar came up earlier I think. It amounted to the OP trying to
'bend/violate the SAML spec, which is a very bad idea'.

_________________________________________________
Dave Perry
eLearning Technologist, Hull College Group

Room L34 - Queens Gardens Library
Wilberforce Drive, Queen's Gardens, Hull, HU1 3DG Extension 2230 / Direct
Dial 01482 381930

* Need a fast reply? Try elearning at hull-college.ac.uk *


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Marcello
Marangio
Sent: 07 November 2016 16:39
To: 'Shib Users'
Subject: R: Modify tag issuer in LogoutRequest


The Issuer remains the entityID, but we are asked to add 2 attributes to the
Issuer (I don't understand know the reason, actually): Format and
NameQualifier.

Thanks again.
M



-----Messaggio originale-----
Da: users [mailto:users-bounces at shibboleth.net] Per conto di Cantor, Scott
Inviato: lunedì 7 novembre 2016 17:28
A: Shib Users
Oggetto: RE: Modify tag issuer in LogoutRequest

> There is no such feature.

(and very little reason for one other than a static extension).

Issuer MUST be the entityID of the SP, full stop.

-- Scott


--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net

--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net

**********************************************************************
This message is sent in confidence for the addressee only. It may  contain
confidential or sensitive information.  The contents are not to be disclosed
to anyone other than the addressee.  Unauthorised recipients are requested
to preserve this confidentiality and to advise us of any errors in
transmission.  Any views expressed in this message are solely the views of
the individual and do not represent the views of the College.  Nothing in
this message should be construed as creating a contract.

Hull College Group owns the email infrastructure, including the contents.

Hull College Group is committed to sustainability, please reflect before
printing this email.
**********************************************************************

TEXT
--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net