Anyone had success/failures with changing IdP IP addresses?

Brian Koehmstedt bkoehmstedt at ucmerced.edu
Fri Jul 25 12:57:31 EDT 2014


On 7/24/2014 5:18 PM, Cantor, Scott wrote:
>> Conversely, if I don't see the SP making these queries to
>> AttributeService, then I can assume attributes are being pushed anyway
>> and it's not the curl bug, correct?
> There's nothing being pushed in SAML 1 unless you change the setting to do
> that, but the only way it won't query is if attributes are pushed.

Scott, it seems to me from analyzing Firebug data and my Apache logs 
that SAML 1 attribute pushing is happening for the service providers I'm 
testing with, so my IdP must be configured to do the SAML 1 pushing 
(although I have made no previous conscious effort to configure my idp 
to force push).

But I'd like to test my attribute query service nevertheless to rule 
this out as a problem, so this brings me to the question: Where would I 
make configuration changes to force attribute pull such that the 
AttributeService will be queried by the SP?  I've done some Google 
searches but I'm falling short, so if there's a wiki page that is 
relevant, a pointer to that page would be helpful.

Thanks.



More information about the users mailing list