Addition of SAML2 support for SP
jravi123 at hotmail.com
Thu Nov 8 15:40:40 EST 2012
Currently all user sessions are initiated at SP and we do not use discovery service.
> From: cantor.2 at osu.edu
> To: users at shibboleth.net
> Subject: Re: Addition of SAML2 support for SP
> Date: Thu, 8 Nov 2012 20:17:16 +0000
> On 11/8/12 3:12 PM, "Ian Young" <ian at iay.org.uk> wrote:
> >Presumably that's true now if the SP has only SAML 1 metadata? Which is
> >to say, it's not making anything worse?
> It depends on error handling and discovery, but yes, in some sense it
> might just be changing where the error shows up. But that would be a sign
> of a discovery problem in terms of how things are deployed. If you give
> users the option to pick an IdP that doesn't actually work for your
> system, then of course it will break but that's a fixable issue by
> changing discovery.
> -- Scott
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the users