Active Directory as Authentication Source

[Michael Dahlberg]

>
>
> >
> >(3) Ultimately, I'd like to test this against all of the SPs that we work
> >with.  To do that, I've replicated our production server's metadata on
> >this server.  I then modify the client browser's /etc/hosts file so that
> >the name of production Shibboleth
> > server has the IP address of the test Shibboleth server.  Is this the
> >way most IdP sites test changes in their configuration before they put
> >them into production?
>
> Yes, as long as there's no back-channel. With that, there's no viable way
> to test, you just need control and confidence in what you're doing, and
> SPs you can test that you control.
>
>
>

Thanks.  I'm pretty sure I could close the SOAP port with no loss of
functionality with my SPs.

I'll give Kerberos a try.  I was just hoping somebody might have seen
something wrong in my current methodology.

Mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150304/b1a2df84/attachment.html