Modify tag issuer in LogoutRequest
marcello marangio
m.marangio at innova.puglia.it
Mon Nov 7 13:18:36 EST 2016
Thanks for your answer. I see your point, It's very interesting. and i
will try to understand why they are asking us such a thing.
I hope this won't have a huge impact on shibboleth usability in italy
Thanks again.
M
Il lunedì 7 novembre 2016, Cantor, Scott <cantor.2 at osu.edu> ha scritto:
> > The modification I would like to have is compliant to the SAML2 specs.
>
> No, it's not.
>
> > It is a valid saml2 Issuer element.
>
> A valid element syntactically can still be invalid semantically. The
> Format "urn:oasis:names:tc:SAML:2.0:nameid-format:entity" does not need
> to be explicit (it's the default for Issuer) but in either case, that
> Format is explicitly documented in the standard and does not allow
> NameQualifier or SPNameQualifier to be set. See section 8.3.6 of SAML Core.
>
> It's a pedantic matter, but it speaks to somebody misusing the spec to do
> something wrong, and it's about you asking the software to be changed or
> configurable to let you do something the standard precludes. That's not
> sensible and it will not allow you to.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net <javascript:;>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161107/9a3bfd46/attachment.html>
More information about the users
mailing list