EPPN attribute

[Josef Fortier]

Peter, thank you very much for your help!


> Assuming you pointed the SP to the URL on your IDP that produces SAML
> (XML) metadata, you'd need to change SSP's configuration to also
> produce the Scope element in that output. Not a question for this list
> but  just add "scope" to your ./metadata/saml20-idp-hosted.php:
> http://simplesamlphp.org/docs/stable/simplesamlphp-reference-idp-hosted#section_1

Adding scope to the metadata generator and a far end restart and all
works as expected.

> (Of course semantically an IdP self-asserting what scopes it is
> allowed to assert is laughable but whatever.)

Presumably it's a statement of trust on the vendors part, which probably
works fine in practice. I'd assumed that they manually setup our IDP,
but that's probably not the case.

> I'm pretty sure you can use SSP successfully in InCommon, but that's
> not a topic for this list, of course.

I'll probably post something to the SSP list. I've just browsed
lists.incommon.org and none of the lists there seem appropriate. I'd be
happy to hear any suggestions of appropriate lists :-)
-- 
__________________________________________________________________________
Josef Fortier
Systems Administrator
fortier at augsburg.edu
Phone: 612-330-1479
__________________________________________________________________________