Vary ResponderId by Metadata Source
Cantor, Scott
cantor.2 at osu.edu
Mon Sep 12 13:59:30 EDT 2016
> A collection of entity groups is a bit of a wrinkle. I recall a discussion from a
> while back that the behavior of an entity appearing in multiple metadata
> sources could produce indeterminate behavior and was frowned upon.
> Violating that rule is the only way I could see that would produce multiple
> values. So in practice won't an entity have exactly one entity group?
No, SAML metadata is hierarchical, EntitiesDescriptor can contain another EntitiesDescriptor. The list of groups is a flattened representation of the tree the instance was found in.
-- Scott
More information about the users
mailing list