<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Dec 16, 2015 at 2:02 PM, Peter Schober <span dir="ltr"><<a href="mailto:peter.schober@univie.ac.at" target="_blank">peter.schober@univie.ac.at</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div id=":8de" class="a3s" style="overflow:hidden">That's all you got, really: If there's nothing in the SAML protocol<br>
message and you don't trust the browser (you shouldn't, of course; the<br>
scenatio of course depends on what different behaviour you intend to<br>
display on guessing at the SP that way) what else could there be?</div></blockquote></div><br>I didn't think there was.  I needed a sanity check.</div><div class="gmail_extra"><br></div><div class="gmail_extra">thanks!</div><div class="gmail_extra">Liam</div></div>