On 8/17/12 8:20 PM, "Tom Scavo" <> wrote:
>In the "Identity Provider Discovery Profile" in SAML2Prof, it's not
>exactly clear what is returned by the DS to the SP.
The default policy is that it returns an entityID in a named parameter (or
nothing) and that's it.
> Is it reasonable
>to suppose the entire value of the "_saml_idp" cookie is returned as
>the value of an HTTP parameter?
If you define a policy constant to mean that, pass it to the DS, and
implement that in the DS. With the default policy, no, that would not be
correct.
-- Scott
