HTTP POST Binding in session initiation

Liam Hoekenga liamr at umich.edu
Wed Sep 21 03:44:38 BST 2011


This is probably a stupid question.

Our shib installation currently lives behind our campus SSO (Cosign).   
The SSO will not let you initiate authentication with a POST.  (If  
you're already cosign authenticated, POSTs to cosign work fine.. but  
if you have not yet signed in to cosign, it throws an error).

It seems like we should thus remove HTTP-POST-SimpleSign and HTTP-POST  
SingleSignOnService bindings from our IdP metadata?

Liam






More information about the users mailing list