IDP 4.3 and non URL SP entity IDs

[Cantor, Scott]

> So by setting this property to true, I risk not conforming to proxying standards,
> but little else, correct?

Most likely, especially because the kind of proxying you're doing is one of those things that's not really true proxying. It's your Azure IdP, it's not a different organization's IdP. 

The reason I plugged the hole is policy. If you proxy to a Shibboleth IdP, that IdP can detect and enforce rules based on the original SP if you want it to. I'm sure we are the only IdP in the world that can without plowing into the XML.

> I'm considering creating a condition bean that returns true if the entity ID of the
> SP isn't a URN or URL format as to not break Azure but false otherwise, but I'm
> wondering if it's worth it.

I doubt it.

-- Scott