Default NameIDFormat Metadata Elements
Cantor, Scott
cantor.2 at osu.edu
Wed Sep 14 14:33:38 EDT 2016
On 9/14/16, 2:25 PM, "users on behalf of Klingenstein, Nate" <users-bounces at shibboleth.net on behalf of nklingenstein at calstate.edu> wrote:
> Attempts to kill the back channel aside, should these be the same?
Probably but there's no operational significance to either.
> I don't think there's much practical impact since SP's largely query based on received
> name identifiers and they probably all default to anything is okay, but I got questions
> about it.
The SP doesn't look at that metadata at all, that's correct. About all it could do is refuse to query something I suppose, but it's never been programmed to do that.
It would I suspect be better if we just didn't generate that metadata at all for either role, in the scheme of things.
-- Scott
More information about the users
mailing list