Active Directory as Authentication Source

[Cantor, Scott]

On 3/4/15, 5:48 PM, "Michael Dahlberg" <olgamirth at gmail.com> wrote:


>
>(3) Ultimately, I'd like to test this against all of the SPs that we work 
>with.  To do that, I've replicated our production server's metadata on 
>this server.  I then modify the client browser's /etc/hosts file so that 
>the name of production Shibboleth
> server has the IP address of the test Shibboleth server.  Is this the 
>way most IdP sites test changes in their configuration before they put 
>them into production?

Yes, as long as there's no back-channel. With that, there's no viable way 
to test, you just need control and confidence in what you're doing, and 
SPs you can test that you control.

-- Scott