How to check Issuer existence in idp Response

[Cantor, Scott]

On 7/4/22, 4:40 AM, "users on behalf of Michele Innocenti" <users-bounces at shibboleth.net on behalf of michele at etruriapa.it> wrote:

>    The only way I could think of to force the presence of the first Issuer 
>    element would be to modify the AttributeExtractor to be able to generate 
>    an attribute from that element.

That isn't supported, only the assertion's Issuer can be extracted.

>    I need to check it to implement SPID authentication.

The reason doesn't really matter, it isn't supported and it's done for you by the software. If you check the assertion issuer, you've checked the response.

-- Scott