IDP 4.3 and non URL SP entity IDs

[Michael Grady]

> On Jan 19, 2023, at 4:23 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
>> SimpleSAML can,
> 
> Populate it or enforce attribute filtering or other policy based on its contents? The former is easy, the latter would surprise me, but then again it was always a proxy to begin with.

It would (presumably still does) enforce policy around allowed hops, reduce the number before proxying again, etc. And I did write some code (don't recall exactly what it was) based on the RequesterID, which it made easy to access. And it could use a list of IdPs, if supplied, to guide what IdPs it allowed for "discovery" ro proxying. So pretty full support.

--
Michael A. Grady
IAM Architect, Unicon, Inc.