Shibboleth Developers

[Chad La Joie <>]

You are right.  These are indistinguishable cases.

Jim Fox wrote:
> 
> I can accept and use NoPassive,  but it seems to have two meaning: that
> there was no login handler that supported isPassive; and that isPassive
> was supported but the user did not have a session.  Maybe in practice
> the two amount to the same.
> 
> Jim
> 
> On Dec 17, 2008, at 5:51 PM, Scott Cantor wrote:
> 
>>> What should the response be from the IdP when an request with isPassive
>>> results in no user?
>>
>> I don't think I understand what you mean by "no user". The "standard"
>> situation where it doesn't work is that there's no valid session with a
>> user, so you would return NoPassive. I think you mean some other
>> condition,
>> but AFAIK you pretty much stick with NoPassive because that's supposed
>> to be
>> the "all clear" signal to the SP.
>>
>>> Status:NoPassive doesn't seem right either, as the request was handled.
>>
>> NoPassive means the request wasn't handled...if it was handled, that
>> would
>> be success.
>>
>> -- Scott
>>
>>
>>
> 

-- 
SWITCH
Serving Swiss Universities
--------------------------
Chad La Joie, Software Engineer, Net Services
Werdstrasse 2, P.O. Box, 8021 Zürich, Switzerland
phone +41 44 268 15 75, fax +41 44 268 15 68
,
 http://www.switch.ch