Configuring IdP v.2.3.8 with Silver assurance

Cantor, Scott cantor.2 at osu.edu
Wed Sep 19 16:03:40 EDT 2012


On 9/19/12 3:56 PM, "Terry Fleury" <tfleury at illinois.edu> wrote:

>Thanks for the quick response Scott.
>
>I suspect that I am one of the few (only?) people wanting to do
>UsernamePassword + Kerberos + Silver. I assume that most schools have a
>more complex authentication scheme which they can modify to return
>silver if requested.

I doubt it. I knew that this issue was going to bite people and that's why
I emphasized whenever possible that 2.3 was the baseline to work from.

>At this point, I use the test IdP very rarely, so spending a lot of time
>writing a custom login handler just for 2.3.8 + silver doesn't interest
>me. I guess I'll stick with the (incorrect) v.2.2.1 configuration until
>I decide I need a feature of 2.3.8.

I believe there are/where security issues in the 2.2 releases corrected in
2.3, and it's not going to get any future fixes. If all you have is a test
IdP, that's probably fine.

-- Scott




More information about the users mailing list