Encryption

[Tom Scavo]

On Thu, Sep 4, 2014 at 11:01 AM, Lohr, Donald <lohrda at jmu.edu> wrote:
> Without disclosing the SP (yet), what are some good questions I can ask
> (over and above the one in my original email) to know we are not heading
> down a path that may cause us to do something with our Shibboleth
> service that we may regret or not have a secure handshake with this SP
> or any SP, whether they are an InCommon metadata participating member or
> not?

I think we already covered the bases earlier in the thread. The first
question I ask of any potential SP partner is: What SAML software are
you using? If they say Shibboleth or simpleSAMLphp, I don't need to
ask much more since I know the capabilities of those two software
packages. Anything else is suspect because AFAIK no other software can
consume a federation's metadata aggregate, which is a nonstarter.

See: https://spaces.internet2.edu/x/R4HPAg

Tom