Addition of SAML2 support for SP

Jayashree Ravi jravi123 at hotmail.com
Thu Nov 8 15:40:40 EST 2012


Currently all user sessions are initiated at SP and we do not use discovery service. 

> From: cantor.2 at osu.edu
> To: users at shibboleth.net
> Subject: Re: Addition of SAML2 support for SP
> Date: Thu, 8 Nov 2012 20:17:16 +0000
> 
> On 11/8/12 3:12 PM, "Ian Young" <ian at iay.org.uk> wrote:
> >
> >Presumably that's true now if the SP has only SAML 1 metadata?  Which is
> >to say, it's not making anything worse?
> 
> It depends on error handling and discovery, but yes, in some sense it
> might just be changing where the error shows up. But that would be a sign
> of a discovery problem in terms of how things are deployed. If you give
> users the option to pick an IdP that doesn't actually work for your
> system, then of course it will break but that's a fixable issue by
> changing discovery.
> 
> -- Scott
> 
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121108/53c4b331/attachment.html 


More information about the users mailing list