IdP only using HTTP-Redirect binding
Cantor, Scott
cantor.2 at osu.edu
Thu Sep 27 16:18:29 EDT 2012
On 9/27/12 3:30 PM, "Rawlinson, Philip (rawlinpa)"
<RAWLINPA at UCMAIL.UC.EDU> wrote:
>original IdP). Everything appeared to be working, but one external SP
>reported an issue. Looking at idp-process.log and idp-audit.log, we
>noticed that the second IdP is only
> ever doing HTTP-Redirect bindings, while the original IdP shows requests
>with additional bindings too as expected. Tests with that external SP
>found that on the original IdP, first it will do the HTTP-Redirect
>binding and then a SOAP binding.
It shouldn't. SAML 2 defaults to pushing attributes, so that means you
were never providing any attributes anyway, unless you changed the default
options for attribute flow.
> On the second
> IdP, it only does the HTTP-Redirect binding.
That's what I'd expect.
-- Scott
More information about the users
mailing list