IdP v3 Relying Party Configuration

Peter Schober peter.schober at univie.ac.at
Thu Feb 4 10:25:11 EST 2016


* Cantor, Scott <cantor.2 at osu.edu> [2016-02-04 16:19]:
> > I'm trying to add Microsoft Office365 as a relying party. So far I've added the
> > metadata and configured the required attributes and release policy. My IdP
> > has been migrated to v3 rather than upgraded as I want to do things the v3
> > way.
> 
> I still think that's a mistake until you have a working system you
> can live with and can make discrete changes after that which you can
> easily test and compare. That's a much simpler way to clean up the
> config.

FWIW, the OP's approach (build a new IDPv3 and migrate relevant
settings over from IDPv2) is also what most deployers here have asked
about. I'm guessing mostly because they (righfully) consider their
existing deployment totally obsolete, in (virtual) hardware, OS,
container, and IDP software and configurion versions.
Not saying yourthe official project stance is misinformed or that the
other way is "better", I just find it suits people's mental model
better to replace the old thing with a new thing.
(Very "devops" that way, strangely enough.)
-peter


More information about the users mailing list