Migrating Idp from 1.x to 2.x

[Chad La Joie]

So, what you're saying, is you don't actually support what Scott said.

On Wed, Feb 22, 2012 at 11:45, Tom Scavo <trscavo at gmail.com> wrote:
> On Wed, Feb 22, 2012 at 10:48 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>>
>> Something I have asked InCommon to do that will *greatly facilitate* testing SAML 2.0 rollouts is to allow us to specify SAML 2.0 protocol support without actually adding SAML 2.0 endpoints. That keeps any existing SP using SAML 1.1, but allows SAML 2.0 in an IDP-initiated fashion for testing.
>
> We already support this technique, as documented in the wiki:
>
> https://spaces.internet2.edu/x/YpmKAQ
>
> The trick is to add a superfluous <md:ArtifactResolutionService>
> endpoint to IdP metadata. The appearance of this endpoint in metadata
> triggers the interface to add the SAML V2.0 protocol URI to metadata,
> which is enough to let the IdP push a SAML V2.0 response to an SP.
>
> Tom
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net



-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered