trust_anchor: (RECOMMENDED) The Trust Anchor that the collection endpoint MUST use when collecting Entities. The value is an Entity Identifier. If omitted, the responder sets this parameter to its own Entity Identifier. If the responder does not have a defined Entity Identifier, it MUST use the HTTP status code 400 and set the content type to application/json, with the error code invalid_request.
I don't quite understand what "If the responder does not have a defined Entity Identifier" means... So, I guess the responder doesn't have to be part of the federation (every entity in federation has to have entity ID), or the responder is not actually a trust anchor (or intermediate) in a federation...
Maybe consider clarifying this...
I don't quite understand what "If the responder does not have a defined Entity Identifier" means... So, I guess the responder doesn't have to be part of the federation (every entity in federation has to have entity ID), or the responder is not actually a trust anchor (or intermediate) in a federation...
Maybe consider clarifying this...