minimal/no backchannel shibboleth idp configuration

[Paul B. Henson]

We're in the middle of changing our domain name (which has been lots of fun 8-/), and as part of that we're deploying separate idp's for the new domain. I'd like to take the opportunity to improve our configuration in ways that would have been difficult to do live on the existing implementation, including not implementing the back channel and minimizing what is advertised in metadata.

I remember earlier this year being directed to a wiki page discussing this very topic, but cannot find it again :(. I think it was an Incommon or Internet2 page, which discussed the various endpoints that might be advertised in metadata and the minimal set needed for basic functionality. Does anybody know of the page I'm thinking of?

Thanks...


--
Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
Operating Systems and Network Analyst  |  henson at cpp.edu
California State Polytechnic University  |  Pomona CA 91768