Shibboleth Developers

[Jim Fox <>]

I can accept and use NoPassive,  but it seems to have two meaning:  
that there was no login handler that supported isPassive; and that  
isPassive was supported but the user did not have a session.  Maybe in  
practice the two amount to the same.

Jim

On Dec 17, 2008, at 5:51 PM, Scott Cantor wrote:

> > What should the response be from the IdP when an request with  
> > isPassive
> > results in no user?
>
> I don't think I understand what you mean by "no user". The "standard"
> situation where it doesn't work is that there's no valid session  
> with a
> user, so you would return NoPassive. I think you mean some other  
> condition,
> but AFAIK you pretty much stick with NoPassive because that's  
> supposed to be
> the "all clear" signal to the SP.
>
> > Status:NoPassive doesn't seem right either, as the request was  
> > handled.
>
> NoPassive means the request wasn't handled...if it was handled, that  
> would
> be success.
>
> -- Scott