← Prev in month
← Prev in thread
PE67: Absence of elements in metadata
First of all, I totally agree that omitting an element (such as <md:NameIDFormat>) altogether does *not* imply that none are supported. This makes perfect sense. The problem I'm having is understanding what it means to list some but not all supported values. Consider the following example: An IdP lists attributes A1, A2, and A3 in metadata. An SP requires A4 to provide access to resource R. Should the SP issue an expensive query to the IdP in hopes of obtaining A4 (even though the IdP does not advertise A4's availability) or should the SP simply deny access to any request for R that requires a query to this particular IdP? Tom
← Prev in month
← Prev in thread