Shibboleth Developers

["Scott Cantor" <>]

>> I don't really remember what it's coded to do, but it seems as though
it's
>> better for the client itself to deal with POST state when ECP is in the
>> picture.
> 
> Makes sense.  The client can just know it has to redo the post when it
> gets the shib session set up.

That was the idea, I think. There may be something about this in the
shib-uportal list archive. I'll check the code when I have a chance anyway,
but it sounds like it's coded not to honor the option if it's an ECP
AuthnRequest. 

-- Scott