search

OpenConext-Attic / OpenConext-api

:warning: Obsolete respository, archive only :zzz:
Apache License 2.0
5 stars 4 forks source link

SAML AuthnRequest sent by API cointains invalid ID attribute #11

Open pmeulen opened 9 years ago

pmeulen commented 9 years ago

The ID attribute on the AuthnRequest is defined as a xs:NCName. This means it may not start with a digit. See: http://www.w3.org/TR/xmlschema-2/#NCName

AuthnRequest generated by API.

<saml2p:AuthnRequest xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"
    AssertionConsumerServiceURL="https://api.surfconext.nl/v1/assertionConsumer"
    Destination="https://engine.surfconext.nl/authentication/idp/single-sign-on/key:20140505"
    ID="9bbd4148-b50b-4941-8202-8d383f9870d5"
    IssueInstant="2014-07-18T07:13:00.626Z"
    Version="2.0"
    >