Modify tag issuer in LogoutRequest
Cantor, Scott
cantor.2 at osu.edu
Mon Nov 7 12:06:22 EST 2016
> The modification I would like to have is compliant to the SAML2 specs.
No, it's not.
> It is a valid saml2 Issuer element.
A valid element syntactically can still be invalid semantically. The Format "urn:oasis:names:tc:SAML:2.0:nameid-format:entity" does not need to be explicit (it's the default for Issuer) but in either case, that Format is explicitly documented in the standard and does not allow NameQualifier or SPNameQualifier to be set. See section 8.3.6 of SAML Core.
It's a pedantic matter, but it speaks to somebody misusing the spec to do something wrong, and it's about you asking the software to be changed or configurable to let you do something the standard precludes. That's not sensible and it will not allow you to.
-- Scott
More information about the users
mailing list