wiki error

[Cantor, Scott]

> I'm sure the document structure of the md is the same, but what elements
> are used and useful?  This is unclear to a person developing a backdoor.

It depends on which of the mechanisms is being used, and then it would depend on what attribute filtering policies were intended to work, so that all depends on local choices.

Using the artifact trick requires a fairly complete SAML 2 IdP metadata instance, with some specially crafted endpoints.

The other approach doesn't require much of anything but an entityID and whatever else is necessary to make the instance schema-valid and drive whatever filtering is being done (possibly just Scope).

> Fair enough, but since pretty much anyone walking down this path will
> encounter it unless they have advance information that I don't, it
> should be described somewhere so that it doesn't frighten people who
> aren't as prepared as I am to debug it themselves or contact the shib
> list.  So maybe the NativeSPBackdoor page itself is fine.

Or a subpage, whatever is readable.

> I'm happy to take a role in updating the backdoor doc, if that's OK with
> you and everyone else involved.  I'll even do guided howto with my end
> result published -- this is or will be a completely open project.  I
> just want to be sure I'm putting the right things in the right places.

Anybody is welcome to add documentation of any sort, any place.

-- Scott