Vary ResponderId by Metadata Source

Cantor, Scott cantor.2 at osu.edu
Mon Sep 12 13:59:30 EDT 2016


> A collection of entity groups is a bit of a wrinkle. I recall a discussion from a
> while back that the behavior of an entity appearing in multiple metadata
> sources could produce indeterminate behavior and was frowned upon.
> Violating that rule is the only way I could see that would produce multiple
> values. So in practice won't an entity have exactly one entity group?

No, SAML metadata is hierarchical, EntitiesDescriptor can contain another EntitiesDescriptor. The list of groups is a flattened representation of the tree the instance was found in.

-- Scott



More information about the users mailing list