Shibboleth Developers

["Scott Cantor" <>]

> I can accept and use NoPassive,  but it seems to have two meaning:
> that there was no login handler that supported isPassive; and that
> isPassive was supported but the user did not have a session.  Maybe in
> practice the two amount to the same.

All it means in SAML terms is that the user could not be passively
authenticated, whatever the underlying reason.

It's also legal, though nobody does it, to add a third level status code.

-- Scott