Check IdP Artifact-capability in SAML[12]SessionInitiator

Description

Artifact-capability of an IdP can be determined from IdP metadata. (If there is no ArtifactResolutionService with a binding that the SP supports, then a request with an ACS URL that expects artifacts will definitely fail.)

A SessionInitiator could fail before redirecting, thus it could allow several SessionInitiators chained together with different defaultACSIndex values. (Similarly to the case of a SAML2 SessionInitiator and SAML1-only IdP.)

Environment

None

Activity

Scott Cantor June 23, 2009 at 12:46 PM

Closing after releases.

Scott Cantor January 27, 2009 at 2:24 PM

http://svn.middleware.georgetown.edu/view/cpp-opensaml2?view=rev&revision=435

http://svn.middleware.georgetown.edu/view/cpp-sp?view=rev&revision=2936

This change functions as you wanted. In a chain, the handler will log and silently pass control along. In a non-chain, it errors out.

Fixed

Details

Assignee

Reporter

Components

Fix versions

Created January 22, 2009 at 1:21 PM
Updated June 23, 2009 at 12:46 PM
Resolved January 27, 2009 at 2:24 PM