minimal/no backchannel shibboleth idp configuration

[Andrew Morgan]

On Tue, 16 Dec 2014, Paul B. Henson wrote:

>> From: Andrew Morgan
>> Sent: Tuesday, December 16, 2014 2:08 PM
>>
>> Search the list archives for the subject "Turning off attribute query and
>> artifact resolution endpoints".  I asked this exact question.  I ended up
>> commenting out the unused profiles in relying-party.xml.
>
> Thanks for the pointer. It looks like in that thread, there was a 
> recommendation to just leave handler.xml alone; in this thread though 
> when I asked if it would be a good idea to remove the unused 
> ProfileHandler configuration in handler.xml Scott's response was 
> "Probably."

Go figure, Scott is fickle!  ;)

>> If you want an example of minimal metadata, look at Oregon State 
>> University (entityID="https://login.oregonstate.edu/idp/shibboleth").
>
> Thanks for the example. Out of curiosity, while your entry in the 
> Federation does not include an AttributeAuthorityDescriptor section, if 
> I pull your metadata directly from the idp, it is included, but with no 
> bindings listed? Just out of curiosity, why is that?

I don't know...  I guess I could remove the whole 
AttributeAuthorityDescriptor section.

 	Andy