Vary ResponderId by Metadata Source

[Brent Putman]

On 9/12/16 2:03 PM, Marvin Addison wrote:
> On Mon, Sep 12, 2016 at 1:59 PM Cantor, Scott <cantor.2 at osu.edu
> <mailto:cantor.2 at osu.edu>> wrote:
>
>     EntitiesDescriptor can contain another EntitiesDescriptor. The
>     list of groups is a flattened representation of the tree the
>     instance was found in.
>
>
> I see. Is the order preserved such that the first entry is reliably
> the first parent?
>
>


No, not reliably.  I don't think any such ordering contract is implied.

But in reality: Yes, the values there in the objectMetadata structure
are a List, and will reflect the order of insertion.  As far was
processing the EntitiesDescriptor hierarchy, see
EntitiesDescriptorNameProcessor.  It does simply walk up the tree in the
obvious way, starting with the EntityDescriptor, and insert them in order.

However: I don't think the concept of an EntityGroupName is strictly
limited to the groups defined by an entity's parent
EntitiesDescriptors.  As far as I remember, I don't think we actually
have anything other than groups based on EntitiesDescriptors.  But it's
not strictly defined that way, I think.  One could probably dream up
other ways of defining groups of entities, and the same object metadata
representation could be used.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160912/57671bc0/attachment.html>