question on IdP Discovery - SAML IOP event

Another issue has arisen from the SAML IOP event we would
like guidance from SSTC on.

 

In testing, IdP Discovery, we use the common domain
cot.projectliberty.org. Participants make their URLs off of this, for example
participant1.cot.projectliberty.org. 

 

However, Participant 1 needs its SP and IdP endpoints to be
in the common domain. For example instead of using IdP SSO endpoint URL:

 https://idp.participant1.com/idp

 

they need the IdP endpoint to be:

https://participant1.cot.projectliberty.org/idp

 

Basically needing the common domain to establish their local
SSO session. Some others in the test group feel this is not normative and no
one else needs this domain change for IdP Discovery. Would this be permissible
or unnecessary? Thanks. 

 

Kyle Meadors

Drummond Group Inc.

Principal, Test Process

817-709-1627



 

Calendar: http://tinyurl.com/KyleMeadors-DGI-Calendar

 

* * * * * * * * * * * * * * * * * * * * * * * *

CONFIDENTIALITY DISCLAIMER

This email, including attachments, is confidential and
proprietary. It constitutes exclusive communication solely to the addressee.
Any entity other than the intended addressee is prohibited from use of this
communication for any purpose. This email, including attachments, may not be
distributed, whole or in part.

* * * * * * * * * * * * * * * * * * * * * * * *