Default NameIDFormat Metadata Elements

Cantor, Scott cantor.2 at osu.edu
Wed Sep 14 14:33:38 EDT 2016


On 9/14/16, 2:25 PM, "users on behalf of Klingenstein, Nate" <users-bounces at shibboleth.net on behalf of nklingenstein at calstate.edu> wrote:

> Attempts to kill the back channel aside, should these be the same?

Probably but there's no operational significance to either.

> I don't think there's much practical impact since SP's largely query based on received
> name identifiers and they probably all default to anything is okay, but I got questions
> about it.

The SP doesn't look at that metadata at all, that's correct. About all it could do is refuse to query something I suppose, but it's never been programmed to do that.

It would I suspect be better if we just didn't generate that metadata at all for either role, in the scheme of things.

-- Scott




More information about the users mailing list