IDP 4.3 and non URL SP entity IDs

[Ullfig, Roberto Alfredo]

Thanks for the quick response - that worked.

---
Roberto Ullfig - rullfig at uic.edu
Systems Administrator
Enterprise Applications & Services | Technology Solutions
University of Illinois - Chicago
________________________________
From: Cantor, Scott <cantor.2 at osu.edu>
Sent: Thursday, January 19, 2023 8:41 AM
To: Shib Users <users at shibboleth.net>
Cc: Ullfig, Roberto Alfredo <rullfig at uic.edu>
Subject: Re: IDP 4.3 and non URL SP entity IDs

> that wasn't there before and Microsoft's IDP doesn't like the fact that box.net is
> not in URL format:

That is certainly rich, considering they don't even enforce that for the actual entityID to begin with (AFAIK). Beyond belief, but I guess half correct is better than not at all.

> What is adding that Scoping section?

Automatic, it's part of the spec and was a bug (that it wasn't populated).

Maybe people should start taking us seriously when we say to stop accepting SPs with improper entityIDs.

You can suppress the entire Scoping element by adding ignoreScoping as a profile configuration setting.

https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fshibboleth.atlassian.net%2Fwiki%2Fspaces%2FIDP4%2Fpages%2F1265631694%2FSAML2SSOConfiguration&data=05%7C01%7Crullfig%40uic.edu%7C653cfea8f35d440c835408dafa2b45fd%7Ce202cd477a564baa99e3e3b71a7c77dd%7C0%7C0%7C638097361015488745%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=TK0zq9%2BNXb45opgOqSo%2BeWy2qPq8QVzt1r7WszE5jE4%3D&reserved=0

-- Scott


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230119/53c8b601/attachment.htm>