SAManage with Shibboleth 3?

[Tom Scavo]

On Fri, Apr 20, 2018 at 11:00 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>> The claim is that the SP vendor does not know about the ACS endpoint in the
>> local copy of SP metadata at the IdP but yet the posted AuthnRequest
>> contains the endpoint location in question. If the SP actually issued the
>> posted AuthnRequest, then the SP *does* know about the ACS endpoint.
>> This is a contradiction.
>
> You seem to be supposing that the metadata the SP provides is connected in any meaningful way to how an SP is actually configured.

No, I'm not assuming that is the case. The observation I'm trying to
make is completely independent of any metadata, including the remote
metadata. If the SP issued the posted AuthnRequest, then the endpoint
in question is configured in the SP. How could it be any other way?

> I repeat: I never rely on remote metadata provided by people that have no idea what they're doing (i.e. most vendors).

I don't disagree but I don't want to go there until I've understood
this particular use case.

Tom