Problems getting a new Idp talking to testshib

[Peter Schober]

* PARDEE, MARTIN  (MARTIN) <mlp at research.att.com> [2012-05-25 02:13]:
> My $0.02 is,  when I first tried using test shib,  and got no
> results I had to backtrack until I realized that I was behind a
> corporate firewall, and that my return hostname wasn't visible to
> shib out on the real (inter) net. As opposed to my intranet.

That's not a requirement for any deployment (as long as you're only
using front-channel protocol bindings): Only the HTTP User Agent needs
to be able to access (and hence resolve DNS names for) both the IdP as
well as the SP.
-peter