Vary ResponderId by Metadata Source

[Marvin Addison]

On Mon, Sep 12, 2016 at 11:05 AM Cantor, Scott <cantor.2 at osu.edu> wrote:

> The group data is formally there in the parent object(s) up above the
> EntityDescriptor, but we also annotate all the metadata with the
> EntitiesDescriptor names when the metadata gets loaded and that's already
> implemented for you:
>
> org.opensaml.saml.common.profile.logic.EntityGroupNamePredicate
>

Reviewing that component was helpful, but prompted a follow-up question.

            for (final EntityGroupName group :
input.getObjectMetadata().get(EntityGroupName.class)) {
                if (groupNames.contains(group.getName())) {
                    return true;
                }
            }

A collection of entity groups is a bit of a wrinkle. I recall a discussion
from a while back that the behavior of an entity appearing in multiple
metadata sources could produce indeterminate behavior and was frowned upon.
Violating that rule is the only way I could see that would produce multiple
values. So in practice won't an entity have exactly one entity group?
<users-unsubscribe at shibboleth.net>

Thanks,
M
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160912/50fb5db4/attachment.html>