    public boolean allowECPFlow() {
        return "true".equals(resolveAttribute(SamlConfigAttributes.SAML_ALLOW_ECP_FLOW));
    }
When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.