When ADFS sends a Responder with StatusDenied, the payload looks like this:
<samlp:Status>
<samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Responder">
<samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:RequestDenied" />
</samlp:StatusCode>
</samlp:Status>
Note that there is a nested StatusCode within a parent StatusCode per MS-SAMLPR 3.1.4.7.2 Element <StatusCode>.
It seems that right now python-saml lacks support for this nesting ability. It seems that it's commented out here -- perhaps because there is no self-referencing ability at the current time?
Is there any plan to support nested StatusCodes? Alternatively, is there a suggested workaround?
When ADFS sends a Responder with StatusDenied, the payload looks like this:
Note that there is a nested StatusCode within a parent StatusCode per MS-SAMLPR 3.1.4.7.2 Element <StatusCode>.
It seems that right now python-saml lacks support for this nesting ability. It seems that it's commented out here -- perhaps because there is no self-referencing ability at the current time?
Is there any plan to support nested StatusCodes? Alternatively, is there a suggested workaround?