Anyone had success/failures with changing IdP IP addresses?

[Brian Koehmstedt]

On 7/25/2014 10:09 AM, Cantor, Scott wrote:
> On 7/25/14, 12:57 PM, "Brian Koehmstedt" <bkoehmstedt at ucmerced.edu> wrote:
>> Scott, it seems to me from analyzing Firebug data and my Apache logs
>> that SAML 1 attribute pushing is happening for the service providers I'm
>> testing with, so my IdP must be configured to do the SAML 1 pushing
>> (although I have made no previous conscious effort to configure my idp
>> to force push).
> If the includeAttributeStatement option is on for the ShibbolethSSO
> profile, you are, if not, you're not. There's no guessing and if you
> didn't turn it on, it's not on.

Ok, understood.  I've confirmed the current configuration has an 
explicit includeAttributeStatement="false", so I should be seeing in my 
Apache log a query to the AttributeServer URL for any SAML 1 SP. I'm not 
seeing log entries for those queries for a SAML 1 SP I'm testing now, so 
I'm starting the think my original thesis of SSL handshake failure 
between SP and IdP for attribute query is still a real possibility.  
I'll dig deeper into that.