SP using SAML 1 AttributeService instead of SAML2 HTTP POST

[Gloeb, Geoff]

I looked all through that and ran past it each time. My eyes must have been blurry.  Always the simple things.  Thanks


From:  Rod Widdowson
Reply-To:  Shib Users
Date:  Friday, March 27, 2015 at 11:48 AM
To:  'Shib Users'
Subject:  RE: SP using SAML 1 AttributeService instead of SAML2 HTTP POST


>   What
> would make the SP use the SAML 1 AttributeService instead of just using a
> SAML 2 POST? Our SP metadata AssertionConsumerService SAML 2.0 HTTP-
> POST is index=1.  Appreciate the help.

What does hibboleth2.xml have to say in the <SSO> element.

Mine says:

            <SSO discoveryProtocol="SAMLDS" discoveryURL="https://w2k3.steadingsoftware.net/eds.html">
               SAML2 SAML1
            </SSO>

But if I reverse the order of "SAML2 SAML1" then it prefers SAMl1

/Rod

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


The information in this e-mail may be privileged and confidential, intended only for the use of the addressee(s) above. Any unauthorized use or disclosure of this information is prohibited. If you have received this e-mail by mistake, please delete it and immediately contact the sender.