minimal/no backchannel shibboleth idp configuration
Paul B. Henson
henson at csupomona.edu
Tue Dec 16 19:17:45 EST 2014
> From: Andrew Morgan
> Sent: Tuesday, December 16, 2014 2:08 PM
>
> Search the list archives for the subject "Turning off attribute query and
> artifact resolution endpoints". I asked this exact question. I ended up
> commenting out the unused profiles in relying-party.xml.
Thanks for the pointer. It looks like in that thread, there was a recommendation to just leave handler.xml alone; in this thread though when I asked if it would be a good idea to remove the unused ProfileHandler configuration in handler.xml Scott's response was "Probably."
> If you want an example of minimal metadata, look at Oregon State
> University (entityID="https://login.oregonstate.edu/idp/shibboleth").
Thanks for the example. Out of curiosity, while your entry in the Federation does not include an AttributeAuthorityDescriptor section, if I pull your metadata directly from the idp, it is included, but with no bindings listed? Just out of curiosity, why is that?
Thanks much...
More information about the users
mailing list