Shib IdP Integration Testing w/ InCommon Strategy Advice

[Cantor, Scott]

> We are looking to replace our IdPv2 with IdPv3.  Now that we have many
> services depending on our Shibboleth IdP for authentication, we'd like to
> stand up an integration testing environment with IdPv3 before deploying it
> to production.  We do have a couple local service providers that we exchange
> metadata with directly that we can test, but I was wondering how others
> perform integration testing when standing up an IdP that will be part of a
> federation like InCommon.

By eliminating the back channel as part of my rollout and doing testing with /etc/hosts changes using my production certificates and keys in the upgraded environment.

-- Scott