How to check Assertion Conditions element

[Michele Innocenti]

Il 05/07/22 16:03, Cantor, Scott via users ha scritto:
> On 7/5/22, 9:52 AM, "users on behalf of Michele Innocenti" <users-bounces at shibboleth.net on behalf of michele at etruriapa.it> wrote:
>
>>     I sent the request to join spid to the authority and I hope for the best.
> Anything you want to impose on the assertion could be done yourself since the assertion is exposed to the application if you want it to be.
>
> -- Scott


Now I understand what you meant and it's making me think but it's not easy.
Are you referring to this?

https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065335032/AssertionExport

If I expose the Assertion to the application, I could check the 
Condition element but not the Issuer which is in the Response (outside 
the Assertion).
Right?

My implementation is an Apache proxy to give the authentication service 
to different public administrations and different applications.
The applications are not on the Shibboleth server.
If I wanted to implement authentication on a single application, I would 
not have chosen Shibboleth because there are other Spid SP projects 
written for the application specific language (Django, php, nodejs 
Express...).

-- Michele