Discovery Service/WAYF v1.2.1 Shibboleth service provider and simpleSAMLphp - cannot recognize federation metadata
Rod Widdowson
rdw at steadingsoftware.com
Wed Jun 6 08:25:43 BST 2012
The only thing to add to what Peter said is that I know that the UK Federation has SimpleSaml PhP IdPs and SPs, so you could check
that metadata.
I know that the IdPs work with the CDS (because I just tried). It doesn't look as though the SP supports the CDS (it doesn't have a
DiscoveryResponse), but that it the SP's problem, not yours.
/Rod
> -----Original Message-----
> From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Peter Schober
> Sent: 06 June 2012 07:28
> To: users at shibboleth.net
> Subject: Re: Discovery Service/WAYF v1.2.1 Shibboleth service provider and simpleSAMLphp - cannot
> recognize federation metadata
>
> * Coeus[TM] <coeus.ph at gmail.com> [2012-06-06 05:42]:
> > Then we have here a federation that uses a different SSO platform
> > called simpleSAMLphp. They have provided several links to their
> > metadata but they seem to be incomplete for the CDS/WAYF and we cannot
> > use them.
>
> Hard to say, with the complete lack of information you give about the metadata in question (federation
> name, URL, what you consider incomplete/unusable about it, etc.). Not that the Shibboleth users
> mailing list is some kind of "we check any federations metadata and give good advice about it"-
> service.
> If simpleSAMLphp produced metadata unusable by some Shibboleth component (such as the CDS, which I
> don't use myself) I'd also make sure I'd let the SSP people know about it via their own mailing list
> http://simplesamlphp.org/lists (that of course requires stating clearly what's wrong with the metadata
> in technical terms), -peter
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list