testing errors

Peter Schober peter.schober at univie.ac.at
Tue Jan 16 11:34:08 EST 2018


* Tom Scavo <trscavo at gmail.com> [2018-01-16 17:26]:
> On Tue, Jan 16, 2018 at 11:21 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> > I have always advocated that we should eliminate the metadata
> component and run testshib as an open system that doesn't require
> any metadata, and if it ever became something the project operated,
> that's what would happen.
> 
> I don't quite know what you mean. Can you help me understand?

The IDP part could run without metadata ("promiscuous mode") and send
anyone what they want, to the requested endpoint. That won't work for
SPs that can't do SP-initiated SSO, though, AFAICT.

Not sure how the SP would know where to send requests, either.

-peter


More information about the users mailing list