Azure ignores saml metadata descriptors

%3CLINGO-SUB%20id%3D%22lingo-sub-1632912%22%20slang%3D%22en-US%22%3EAzure%20ignores%20saml%20metadata%20descriptors%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1632912%22%20slang%3D%22en-US%22%3E%3CP%3Ehi%2C%3C%2FP%3E%3CP%3EI%20am%20uploading%20saml%20metadata%20for%20an%20enterprise%20app%2C%20the%20metadata%20contains%20both%20SP%20based%20Metadata%20and%20IDP%20based%20metadata%20sections%2C%20so%20one%20metadata%20document%20contains%20both%20SP%20and%20IDP%20based%20settings.%20Azure%20here%20ignores%20the%20IDPSSO%20descriptors%20and%20picks%20up%20first%20logout%20settings%20it%20finds.%26nbsp%3B%3CBR%20%2F%3EI%20am%20able%20to%20confirm%20this%20by%20switching%20the%20SP%20and%20IDP%20descriptors%20and%20it%20still%20picks%20up%20the%20first%20logout%20settings%20it%20finds.%26nbsp%3B%3C%2FP%3E%3CP%3EPlease%20can%20you%20describe%20why%20this%20behavior%20occurs%3F%20Is%20it%20a%20bug%3F%20How%20does%20azure%20consume%20metadata%20and%20does%20it%20actually%20read%20the%20metadata%20descriptors%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3CP%3ENanda%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

hi,

I am uploading saml metadata for an enterprise app, the metadata contains both SP based Metadata and IDP based metadata sections, so one metadata document contains both SP and IDP based settings. Azure here ignores the IDPSSO descriptors and picks up first logout settings it finds. 
I am able to confirm this by switching the SP and IDP descriptors and it still picks up the first logout settings it finds. 

Please can you describe why this behavior occurs? Is it a bug? How does azure consume metadata and does it actually read the metadata descriptors?

 

Thanks

Nanda

0 Replies