Anyone had success/failures with changing IdP IP addresses?
Cantor, Scott
cantor.2 at osu.edu
Fri Jul 25 13:09:00 EDT 2014
On 7/25/14, 12:57 PM, "Brian Koehmstedt" <bkoehmstedt at ucmerced.edu> wrote:
>
>Scott, it seems to me from analyzing Firebug data and my Apache logs
>that SAML 1 attribute pushing is happening for the service providers I'm
>testing with, so my IdP must be configured to do the SAML 1 pushing
>(although I have made no previous conscious effort to configure my idp
>to force push).
If the includeAttributeStatement option is on for the ShibbolethSSO
profile, you are, if not, you're not. There's no guessing and if you
didn't turn it on, it's not on.
>But I'd like to test my attribute query service nevertheless to rule
>this out as a problem, so this brings me to the question: Where would I
>make configuration changes to force attribute pull such that the
>AttributeService will be queried by the SP? I've done some Google
>searches but I'm falling short, so if there's a wiki page that is
>relevant, a pointer to that page would be helpful.
See above.
-- Scott
More information about the users
mailing list