Shibboleth Developers

["Scott Cantor" <>]

> Doesn't the AA check the veracity of NameQualifier?  I guess it
> doesn't matter since none of the existing NameIdentifierMapping
> implementations satisfy our use case (or so it seems).  Are we going
> to have to write our own?

There might be cases where it's checked, but that would depend on the format
and what the plugin wants to do. I have no idea what the existing plugins do
or don't do for X.500 names. I think somebody somewhere can spare 20 minutes
to write a new one. There's no deployment using something other than handles
that can usually avoid writing one.

-- Scott