Shibboleth Developers

[Thomas Lenggenhager <>]

Thanks for clarifying.

> > Doesn't this mean, that in your example
> >     http://jstor.org/InCommon
> > and http://jstor.org/InCommon/admin
> > return SAML metadata documents? With these URLs I would more expect a
> > normal web page, the application or one of its services.
> 
> It doesn't matter what they are. I just contrived examples. You use whatever
> you want to use.

So with 'dereferencing the URI' in your first message...
> The ApplicationID values are URIs, and would normally be the SAML 2.0
> ProviderID values used by a target/SP to issue messages, and dereferencing
> the URI would usually return a SAML metadata document.
...you did not mean the resolution via HTTP as I interpreted it.

Thomas