minimal/no backchannel shibboleth idp configuration

Cantor, Scott cantor.2 at osu.edu
Tue Dec 16 17:01:47 EST 2014


On 12/16/14, 9:45 PM, "Tom Scavo" <trscavo at gmail.com> wrote:


>
>Well, I'm hoping someone on the project team (or anyone else) can
>weigh in here but I'm hoping an IdP can support SAML1 at some level
>but avoid advertising it in federation metadata.

Yes, that is one of many reasons why it's a terrible idea to expose 
metadata generated on the fly from a configuration if it's self-published.

But the question was "what should I do if I don't use it?", which is 
different. You probably don't want something accidentally using it.

-- Scott



More information about the users mailing list