IDP 4.3 and non URL SP entity IDs

[Cantor, Scott]

> that wasn't there before and Microsoft's IDP doesn't like the fact that box.net is
> not in URL format:

That is certainly rich, considering they don't even enforce that for the actual entityID to begin with (AFAIK). Beyond belief, but I guess half correct is better than not at all.

> What is adding that Scoping section? 

Automatic, it's part of the spec and was a bug (that it wasn't populated).

Maybe people should start taking us seriously when we say to stop accepting SPs with improper entityIDs.

You can suppress the entire Scoping element by adding ignoreScoping as a profile configuration setting.

https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631694/SAML2SSOConfiguration

-- Scott