Skip to Content.
Sympa Menu

metadata-support - Re: [Metadata-Support] Metadata checks

Subject: InCommon metadata support

List archive

Re: [Metadata-Support] Metadata checks


Chronological Thread 
  • From: "Cantor, Scott" <>
  • To: "" <>
  • Subject: Re: [Metadata-Support] Metadata checks
  • Date: Thu, 11 Jan 2018 00:00:29 +0000
  • Accept-language: en-US
  • Authentication-results: spf=pass (sender IP is 128.146.138.9) smtp.mailfrom=osu.edu; incommon.org; dkim=none (message not signed) header.d=none;incommon.org; dmarc=pass action=none header.from=osu.edu;
  • Ironport-phdr: 9a23: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
  • Spamdiagnosticmetadata: NSPM
  • Spamdiagnosticoutput: 1:99
On 1/10/18, 6:50 PM,
"
on behalf of Tom Poage"
<
on behalf of
>
wrote:

> Probably an off case, but a vendor registered a new instance of their
> application for us into InCommon and
> inadvertently used another school's ACS URL. Given (what I think are) the
> several cases where SP ACS URLs span several
> domains, I imagine a consistency/sanity check on ACS URLs is nigh on
> impossible.

There used to be a DNS-based approval step for cross-registering endpoints,
but as I understand it from a recent case, that's no longer done. They vet
the entityID, but the URLs are at the discretion of the registrant. If you
think about it, you have to approve somebody registering a host in your DNS
anyway, so them asking again is kind of superfluous.

-- Scott



Archive powered by MHonArc 2.6.19.

Top of Page