Port Question

[Cantor, Scott]

> What are ports 80, 443 and 8443 primarily used for within the shibboleth
> system and on which side must they be opened(SP or IDP)?

The SP uses no ports apart from your web site's choice of ports. The IdP has browser facing security-sensitive operations that should be on 443 and conventionally SOAP traffic is on port 8443, but can be on any port.

> As far as I know, 8443 is used to transmit metadata as well as control attribute
> release.

It does neither, unless by "control" you mean attribute queries for legacy SPs.

-- Scott