Any "gotchas" to adding in SAML 2 support?

[Eric Goodman]

Greetings,

We are running IdP 2.x, and we have been publishing SAML2 endpoints to
several non-InCommon SPs. However, the metadata we currently publish
through InCommon is all SAML1. We would like to add our SAML2 endpoints
into our InCommon metadata.

My question for the group is: are there any gotchas with doing this? After
looking through the troubleshooting pages on the wiki, it seems like the
most common mistake we could make is failing to update all of our relying
party configs to support SAML2 before the SAML2 endpoints are published, but
we're wondering if there are any other gotchas to look for on the IdP or SP
before making the change.

Thanks,

--- Eric
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120705/f5965db2/attachment.html