Back-Channel Attribute Authority

[Peter Schober]

* Joshua Riffle <jriffle at apu.edu> [2013-07-12 16:46]:
> So I noticed in an article from the SWITCH federation that their
> configuration procedure for a Shibboleth IDP is to have Tomcat accepting
> secure traffic on port 443 (HTTPS) and 8443.

Note that this his not actually the case as SWITCH still documents the
use of the IdP behind with Apache httpd, and Tomcat does not listen on
or handle traffic on either TCP/443 or TCP/8443 in that setup.
(Which is of course related to the very topic at hand and still is the
easiest way to support the back channel when you can't use the
"delegate to application" plugin the Shibboleth developers have
written for Apache Tomcat 6).
-peter