Interfederation

[Tom Scavo <>]

On Wed, Apr 3, 2013 at 6:08 PM, Cantor, Scott 
<>
 wrote:
>
> I would be very disappointed with an outcome of "role
> only" since that is not the definition of the element today.

I haven't heard anyone say that.

>>Then we would have a larger problem since the metadata for an IdP
>>Proxy contains both an <md:IDPSSODescriptor> element and an
>><md:SPSSODescriptor> element, and you wouldn't want to put a
>><shibmd:Scope> element in the <md:Extensions> element of the
>><md:EntityDescriptor> element in that case.
>
> There is no problem there. The extension should apply only to roles that
> produce attributes. It has no meaning for others.

Yes, but your spec is silent about these details. I'm just trying to
clarify some points so consumers (like myself) know what to expect.

Tom