What will happen if?

Dan McLaughlin dmclaughlin at tech-consortium.com
Thu Nov 1 11:59:52 EDT 2018

If you have the SAML IDP Cookie set to expire every 365 days, and you
remove the IDP from the list of trusted metadata, what will the SP do
the next time it get's handed an IDP cookie that it no longer trusts?
What I would like it to do is hand them off to the Discovery Service
to select a new IDP, but I have a feeling they are going to get an
error from the SP instead.




More information about the users mailing list