Metadata Changeover Questions

Cantor, Scott cantor.2 at osu.edu
Wed Jul 22 18:23:58 EDT 2015


On 7/22/15, 5:05 PM, "users on behalf of McKean, Brandon Scott - mckeanbs" <users-bounces at shibboleth.net on behalf of mckeanbs at jmu.edu> wrote:


>
>To make sure I understand what you mentioned from before, you're saying I should add something like this and only this to the metadata? :
>
><ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://itfederation.jmu.edu:8443/idp/profile/SAML2/SOAP/ArtifactResolution"
> index="2"/>

Yes. It's a trick, but it works. InCommon's tools will update the protocolSupportEnumeration if there's a single SAML 2 endpoint in place, and that endpoint alone won't influence any SP to do anything, but once the protocol's in place, Shibboleth SPs at least will accept responses from the IdP.

You should carefully review the XML output it presents as the "to be published" data to make sure all it adds is the one endpoint and the updated protocolSupportEnumeration.

-- Scott



More information about the users mailing list