On Wed, Jan 30, 2013 at 8:37 AM, Terence Schlacter <tschlact at gmail.com> wrote: > > So we'd like to remove any backchannel service, and shibboleth1 protocol > support. Just FYI but you don't really need to give up attribute query (and hence SAML1) to eliminate state. There is a so-called crypto plug-in you can use to make attribute query stateless. Tom