minimal/no backchannel shibboleth idp configuration
Cantor, Scott
cantor.2 at osu.edu
Tue Dec 16 17:01:47 EST 2014
On 12/16/14, 9:45 PM, "Tom Scavo" <trscavo at gmail.com> wrote:
>
>Well, I'm hoping someone on the project team (or anyone else) can
>weigh in here but I'm hoping an IdP can support SAML1 at some level
>but avoid advertising it in federation metadata.
Yes, that is one of many reasons why it's a terrible idea to expose
metadata generated on the fly from a configuration if it's self-published.
But the question was "what should I do if I don't use it?", which is
different. You probably don't want something accidentally using it.
-- Scott
More information about the users
mailing list