Shibboleth Developers

["Scott Cantor" <>]

I noticed in Lukas' discussion of isPassive at
https://spaces.internet2.edu/display/SHIB2/isPassive that he noted the
problem that it will still redirect you away if you have SAML 1 or a WAYF
configured.

I noted that recently and filed it as a bug:
https://bugs.internet2.edu/jira/browse/SSPCPP-274

People would agree it's a bug, right? If you happened to be logged into an
old IdP or whatever, it would work, but certainly the intent isn't to let it
prompt you if you don't, so I was assuming the right thing would be to fix
that and have it just send you back to the target location.

I didn't want to change behavior on people without warning, so I thought I'd
check. My fix includes a new parameter option to the handler for
returnOnError that acts similarly to using isPassive with an unsupported
handler and silently returns you rather than spitting back an error page,
though that would be off by default, just triggered implicitly if isPassive
is used.

-- Scott