How to check Issuer existence in idp Response
Michele Innocenti
michele at etruriapa.it
Tue Jul 5 13:47:57 UTC 2022
Il 05/07/22 14:19, Cantor, Scott via users ha scritto:
> On 7/1/22, 9:02 PM, "Brent Putman" <putmanb at georgetown.edu> wrote:
>
>> So I guess what the OP asking is if there's a way to enforce the presence. Since the spec allows it explicitly to
>> be omitted, I'm not sure what the reason is. And I doubt the SP supports arbitrary validation rules like that
>> anyway, right?
I realized I got the wrong name: Brent explained well what I meant. Sorry.
> If you write C++ it does, so, no, not in practice.
>
> -- Scott
>
I've seen the code and definitely won't try to change it.
Also, I think there are active implementations of Spid via Shibboleth
and I think they have the same problems that I have found.
So, I hope that the implementation is allowed even with these problems.
Thanks
-- Michele
More information about the users
mailing list