IDP 3 clustering

[Hong Ye]

Hi,

>From IDP 3.0 clustering wiki page, it says "SAML 1.1 artifact use is not supported if more than one node is deployed”. Doe it mean SAML1 ArtifactResolutionService service won’t work, but SAML1 AttributeService still works? From our IDP log, some applications are using SAML1 attributeQuery through back channel. Will these SAML1 requests work when we cluster more than one node of IPD 3.0?

INFO [Shibboleth-Access:73] - 20150625T134443Z|213.9.179.49|shibidp.cit.cornell.edu<http://shibidp.cit.cornell.edu>:443|/profile/Shibboleth/SSO|

INFO [Shibboleth-Audit:745] - 20150625T134443Z|urn:mace:shibboleth:1.0:profiles:AuthnRequest-20150625T134443Z|urn:mace:shibboleth:1.0:profiles:AuthnRequest||https://www.jstor.org/shibboleth|urn:mace:shibboleth:2.0:profiles:saml1:sso|https://shibidp.cit.cornell.edu/idp/shibboleth|urn:oasis:names:tc:SAML:1.0:profiles:browser-post|...

INFO [Shibboleth-Access:73] - 20150625T134444Z|216.27.103.130|shibidp.cit.cornell.edu<http://shibidp.cit.cornell.edu>:8443|/profile/SAML1/SOAP/AttributeQuery|

INFO [Shibboleth-Audit:745] - 20150625T134444Z|urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding|_8463790108880412574| https://www.jstor.org/shibboleth|urn:mace:shibboleth:2.0:profiles:saml1:query:attribute|https://shibidp.cit.cornell.edu/idp/shibboleth|urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding|_d3d284acd4f8a642f8fb9f9917dcb470|...

Thanks,
Hong
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150625/e4576db5/attachment.html>