IdP implementation roadmap

[Cantor, Scott]

On 4/22/19, 3:35 PM, "users on behalf of Yakov Revyakin" <users-bounces at shibboleth.net on behalf of yrevyakin at gmail.com> wrote:

> It looks like Cyberark doesn't recognize NameID section.

I understand that you think it's a logical assumption that documentation and error messages are going to be meaningful, but the reality isn't that simple and I doubt that's what the error is.

As for what's different, one has signed assertions and one has signed responses and signed assertions. So the inference is that they break on signed responses, which is a bug, probably not the last you'll have to work around.

And once it's working more or less, then the final step is to test it with a real Format and see if it works, at which point you've proven you don't need "unspecified".

-- Scott