Shibboleth Developers

["Scott Cantor" <>]

> That's my point.  Shouldn't Shib adhere to "TARGET" (which is what the
> SAML spec is trying to say, I think).  A small point, admittedly, but
> it affects interoperability (if that's an issue).

Well, I disagree with characterizing the request as being part of SAML,
because it's not. The only parameter that's standard is on the way back out,
and we don't conflict with that, we use TARGET. I used lower case in the
request originally (3 years ago) because I preferred it, and there was
nothing telling me not to.

But if you're saying that all the commercial products all use TARGET in
their proprietary requests (I have no knowledge either way), we're pretty
much stuck with this, unless maybe it's clearly demonstrated that TARGET is
the *only* paramter required. That seems unlikely to me, in which case we're
talking translation anyway (fairly simple), and I don't think interop with
non-standard aspects of 1.1 products is a focus right now.

I guess it could be tested whether or not the servlet currently would handle
this and just find a TARGET parameter, in which case it would be a
transparent change (back to your original question), but I'm still skeptical
that this is a rich enough request. If it is, these products must be pretty
limited...

-- Scott