How to check Issuer existence in idp Response

Michele Innocenti michele at etruriapa.it
Tue Jul 5 13:47:57 UTC 2022


Il 05/07/22 14:19, Cantor, Scott via users ha scritto:
> On 7/1/22, 9:02 PM, "Brent Putman" <putmanb at georgetown.edu> wrote:
>
>>     So I guess what the OP asking is if there's a way to enforce the presence.  Since the spec allows it explicitly to
>> be omitted, I'm not sure what the reason is.  And I doubt the SP supports arbitrary validation rules like that
>> anyway, right?
I realized I got the wrong name: Brent explained well what I meant. Sorry.
> If you write C++ it does, so, no, not in practice.
>
> -- Scott
>
I've seen the code and definitely won't try to change it.

Also, I think there are active implementations of Spid via Shibboleth 
and I think they have the same problems that I have found.
So, I hope that the implementation is allowed even with these problems.

Thanks

-- Michele


More information about the users mailing list