Invalid subject tests should allow for user login before expecting an error
bakejeyner opened this issue · 0 comments
bakejeyner commented
PR
Description
The invalid subject error tests should allow the IdP under test to attempt to log the user in before erroring out. This way the IdP can decide if the user that logged in matches (which it never should) the subject sent with the AuthnRequest.
Steps to Reproduce
- Run the CTK against DDF.
Expected behavior:
The invalid subject SSO error tests pass.
Actual behavior:
The invalid subject SSO error tests fail.
Occurs how often:
100%
Version(s)
Any
SAML V2.0 Specification Quote
Not Applicable
Additional Information
Not Applicable