minimal/no backchannel shibboleth idp configuration

[Peter Schober]

* Eric Goodman <Eric.Goodman at ucop.edu> [2014-12-17 19:39]:
> So I'd perhaps suggest rephrasing Tom's comment to be "an IdP should
> avoid advertising SAML2 attribute queries in federation metadata". I
> think saying IdPs should avoid it altogether is perhaps overly
> strong. I agree it's probably generally unlikely that an IdP
> supports general attribute-query access. 

Other federations my have other opinions on that, of course.
E.g. deprovisioning is sometimes mentioned as a use case for attribute
queries. So those wanting to help SPs doing that probably wouldn't
agree with Tom's statements.
-peter