Using a different SP entity ID with the IdP SAML authn flow

Wessel, Keith kwessel at
Wed Sep 15 17:25:20 UTC 2021

Ah, I get it. I didn't think about returning nothing. Yes, that makes sense. I assume if I return nothing, the IdP will just fall back on using its own entity ID.?


-----Original Message-----
From: users <users-bounces at> On Behalf Of Cantor, Scott
Sent: Wednesday, September 15, 2021 11:54 AM
To: Shib Users <users at>
Subject: Re: Using a different SP entity ID with the IdP SAML authn flow

On 9/15/21, 12:45 PM, "users on behalf of Wessel, Keith" <users-bounces at on behalf of kwessel at> wrote:

>    If I did want to put if statements in for the specific authn contexts I want to support and have any other non
>-null values result in an error, what method would I call to set the error?

I doubt it would be wise to try to do that, all you can do here is return something or not, and if you throw it's not going to be graceful. I'm just saying you probably want to leave it returning nothing so it falls back to the usual value if something unusual happens.

-- Scott

For Consortium Member technical support, see;!!DZ3fjg!u2JvRx5y83x9ARlOMS7GmkAwHpOPnoFMmusxllrKGjfX76gAUGaubCtg6MgO_UTK6g$ 
To unsubscribe from this list send an email to users-unsubscribe at

More information about the users mailing list