IdP v3 not releasing attributes to SAML1 SPs
Mark K. Miller
max at psu.edu
Mon Aug 22 13:26:21 EDT 2016
On Mon, 22 Aug 2016, Cantor, Scott wrote:
> There's absolutely no difference in SAML 1 behavior. Attributes are
> omitted unless you tell it to push them, same as before.
Just to be sure you keep the right perspective, I'm just clueless, not
being arguementative! And, to prove it... "Same as before?" What did I
do before to push them?
> I had, and still have, SAML 1 SPs, but I turned off queries deliberately
> and would suggest you do the same.
So, if it's all identical, just the same, then why would you need to make
this change? Again, searching the wiki for "disable saml1 attribute
queries" doesn't seem to (m)any useful results.
What does it take to deliberately turn off SAML1 queries? Would I simply
stop advertising an ArtifactResolutionService endpoint for a SAML1 SOAP
binding in my metadata? Or, is there more to it than that? Is there some
IdP config file that also needs changed?
> -- Scott
Thank you,
Max
More information about the users
mailing list