> Question on proxy callback and validation: If either of the pgtIOU or PGT > fail to be created, should the CAS validation response proceed as if > validation was successful? I tend to think not
I agree on the basis that both are required to perform proxying as described in the protocol, so having one and not the other puts the system in an undefined state. Undefined states are bad. M -- You are currently subscribed to cas-dev@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev
