Migrating Idp from 1.x to 2.x

[Tom Scavo]

On Wed, Feb 22, 2012 at 10:48 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>
> Something I have asked InCommon to do that will *greatly facilitate* testing SAML 2.0 rollouts is to allow us to specify SAML 2.0 protocol support without actually adding SAML 2.0 endpoints. That keeps any existing SP using SAML 1.1, but allows SAML 2.0 in an IDP-initiated fashion for testing.

We already support this technique, as documented in the wiki:

https://spaces.internet2.edu/x/YpmKAQ

The trick is to add a superfluous <md:ArtifactResolutionService>
endpoint to IdP metadata. The appearance of this endpoint in metadata
triggers the interface to add the SAML V2.0 protocol URI to metadata,
which is enough to let the IdP push a SAML V2.0 response to an SP.

Tom