ScopeMatchesShibMDScope question

[Tomas Stenlund]

Once again,

thanks for the quick reply. And yeah, it looks like a nasty equation 
with a lot of unknowns in it.

Cheers,

Tomas

On 2024-03-20 19:23, Cantor, Scott wrote:
> The IdP's SAML decoder for scoped attributes detects the first instance of the delmiter, splits there, and then the scope (containing the extra one) wouldn't pass a metadata scope check.
>
> The SP might do the same, but the policy rule was there very far back, might not even be needed these days, but it's a good documentation aid anyway.
>
> I will let you do the math on what most non-Shibboleth software might do with stuff like this and what the implications might be.
>
> -- Scott
>
>