Does Destination attribute in AuthnRequest have to exactly match SingleSignOnService

Cantor, Scott cantor.2 at
Thu Sep 27 08:51:03 EDT 2018

On 9/26/18, 6:50 PM, "users on behalf of Brent Putman" <users-bounces at on behalf of putmanb at> wrote:

> Actually, we do perform canonicalization in the evaluation of inbound protocol Destination URLs.

I wasn't aware. The SP does *not*, FWIW.

-- Scott

More information about the users mailing list