minimal/no backchannel shibboleth idp configuration

[Tom Scavo]

On Thu, Dec 18, 2014 at 7:56 AM, Peter Schober
<peter.schober at univie.ac.at> wrote:
> * Eric Goodman <Eric.Goodman at ucop.edu> [2014-12-17 19:39]:
>> So I'd perhaps suggest rephrasing Tom's comment to be "an IdP should
>> avoid advertising SAML2 attribute queries in federation metadata". I
>> think saying IdPs should avoid it altogether is perhaps overly
>> strong. I agree it's probably generally unlikely that an IdP
>> supports general attribute-query access.
>
> Other federations my have other opinions on that, of course.
> E.g. deprovisioning is sometimes mentioned as a use case for attribute
> queries. So those wanting to help SPs doing that probably wouldn't
> agree with Tom's statements.

Yes, both of you are right, I probably shouldn't have posted those
suggestions here since they are more appropriate at the federation
level, not the software level.

Eric, I softened the recommendation as you suggested:
https://spaces.internet2.edu/x/4YHYAg (but followups to the InCommon
participants list, please)

Tom