protocol exchange for Shib IdP 3.0

[Cantor, Scott]

On 2/23/15, 8:05 PM, "Tom Scavo" <trscavo at gmail.com> wrote:

>As you know, to obtain a SAML2 response from an instance of Shib IdP
>2.4, four round trips are required. [1]

Why 4? I would count 2 in the case of a login form. If it's basic-auth 
with ECP, it might be 1 round trip. Depends on what exactly you're trying 
to check I guess. It isn't a fixed number, that depends on authentication, 
which is pluggable. I don't know if you're asking about a specific case, 
or the best case, or...?

> I'd like to do the same analysis for Shib IdP 3.0. Is the protocol 
>exchange for IdP V3
>identical to that of IdP 2.4?

It can be, or it can be different, that all depends on similar factors 
that would probably influence the answer for V2.

-- Scott