SAMLtest Updates

Nate Klingenstein ndk at signet.id
Thu Mar 11 09:28:23 UTC 2021


> A user of SAMLtest was kind enough to point out to me that a validUntil attribute is a MUST on the root element of metadata (333-335).

> This has now been added.

Note that this is only in reference to SAMLtest's own metadata, not to metadata that is uploaded by users.  Such a check could be added someday, but it's unlikely, in following with the "conservative in what you send, liberal in what you accept" philosophy.

I don't want to limit or deter use of the service by testers without validUntil in their metadata or make adding it a perfunctory operation for use of SAMLtest.  However, in production, you should always comply with the spec.

--------
Signet, Inc.
The Art of Access ®

https://www.signet.id



More information about the users mailing list