Skip to Content.
Sympa Menu

shibboleth-dev - Re: [Shib-Dev] IDP metadata with no ACS url

Subject: Shibboleth Developers

List archive

Re: [Shib-Dev] IDP metadata with no ACS url


Chronological Thread 
  • From: Brent Putman <>
  • To:
  • Subject: Re: [Shib-Dev] IDP metadata with no ACS url
  • Date: Fri, 03 Jun 2011 13:06:01 -0400


On 6/3/11 12:54 PM, Brent Putman wrote:

> The consensus was I think that this probably makes sense to do, but
> *only* if the request is signed, allowing verification that the ACS URL
> is really the one intended by the (legitimate) requester (i.e. has not
> been tampered with, is not someone spoofing the SP, etc)
>

Indeed there is actually already a Jira issue for this.

https://issues.shibboleth.net/jira/browse/IDP-84


Archive powered by MHonArc 2.6.16.

Top of Page