Why is SAML 1 being used instead of SAML 2?

[Dan Malone]

We are working with Portfolium and trying to understand why a certain configuration is choosing to do SAML 1 over SAML 2.
I have a feeling this is somehow related to how the DS is being used.

Both IDP and SP are members of InCommon and seem to be configured for both SAML 1 and SAML 2.

    IDP:  entityID="https://idp.calpoly.edu/idp/shibboleth"
    SP: entityID="https://portfolium.com/shibboleth"

We are redirected to the DS via this URL:

    https://portfolium.com/sso/login

We were also given a WAYFless URL, using the InCommon DS:

    https://wayf.incommonfederation.org/DS/WAYF?shire=https%3A%2F%2Fportfolium.com%2Fsso%2FSAML%2FPOST&target=https%3A%2F%2Fportfolium.com%2Flogin%2Fsso%3Fnetwork_id%3D6%26from%3D&providerId=https%3A%2F%2Fportfolium.com%2Fshibboleth&action=selection&origin=https%3A%2F%2Fidp.calpoly.edu%2Fidp%2Fshibboleth

For both of these, the logs on the IDP side show this:

    15:34:24.388 - INFO [Shibboleth-Audit:745] - 20150413T223424Z|urn:mace:shibboleth:1.0:profiles:AuthnRequest||https://qa.portfolium.com/shibboleth|urn:mace:shibboleth:2.0:profiles:saml1:sso|https://idp.calpoly.edu/idp/shibboleth|urn:oasis:names:tc:SAML:1.0:profiles:browser-post|_a54e30175af62cdba887a129911cc8e2|jmustang@calpoly.edu|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport||_a34cfe94f32041d57ca38e41a6e8b503|_dab5bc474c8f5e1582aa0f37ae9b92e7,|
    15:34:25.241 - INFO [Shibboleth-Audit:745] - 20150413T223425Z|urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding|_dc37a96fa16e5b54eceb8d7a6179dbe9|https://qa.portfolium.com/shibboleth|urn:mace:shibboleth:2.0:profiles:saml1:query:attribute|https://idp.calpoly.edu/idp/shibboleth|urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding|_3c01b095ddab389c31eb1d8d650aeb8e|jmustang@calpoly.edu||eduPersonAffiliation,sn,transientId,eduPersonPrincipalName,givenName,|_a34cfe94f32041d57ca38e41a6e8b503|_06a9d05a1bc7817eb778baaef017065e,|

We are looking for any tips or hints.

Thanks,
Dan

-- 
Dan Malone
dmalone at calpoly.edu
Cal Poly State University - San Luis Obispo

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150414/b91be652/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3687 bytes
Desc: S/MIME Cryptographic Signature
Url : http://shibboleth.net/pipermail/users/attachments/20150414/b91be652/attachment.bin