Does Destination attribute in AuthnRequest have to exactly match SingleSignOnService

Cantor, Scott cantor.2 at
Wed Sep 26 11:18:25 EDT 2018

> Note the extra ":443" in the Destination attribute. Does that extra ":443" make
> any difference to the Shibboleth IdP?

Yes, we are not obligated to, and do not do, any URL canonicalizaton to compare values.

-- Scott

More information about the users mailing list