Shibboleth Developers

["Scott Cantor" <>]

> What should the response be from the IdP when an request with isPassive
> results in no user?

I don't think I understand what you mean by "no user". The "standard"
situation where it doesn't work is that there's no valid session with a
user, so you would return NoPassive. I think you mean some other condition,
but AFAIK you pretty much stick with NoPassive because that's supposed to be
the "all clear" signal to the SP.

> Status:NoPassive doesn't seem right either, as the request was handled.

NoPassive means the request wasn't handled...if it was handled, that would
be success.

-- Scott