IdPv3 entityID & SAML 2.0 Questions

Cantor, Scott cantor.2 at osu.edu
Thu Jan 21 13:54:42 EST 2016



> -----Original Message-----
> From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Andrew
> Morgan
> Sent: Thursday, January 21, 2016 1:47 PM
> To: Shib Users <users at shibboleth.net>
> Subject: RE: IdPv3 entityID & SAML 2.0 Questions
> 
> On Thu, 21 Jan 2016, Cantor, Scott wrote:
> 
> >> Would it be best to start by installing IdPv2 on the new server or can I just
> >> copy to contents of "/opt/shibboleth-idp" from my current IdP server?
> >
> > Doesn't really matter that much.
> >
> > Whether you start "clean" or by upgrading is one of those personal
> > questions. I think it's easier to upgrade, test, and gradually modernize
> > settings than to try and recreate everything from scratch to match. I
> > think the latter is very dependent on having a very thorough record and
> > grasp of everything the old system was doing or you'll miss something.
> 
> I'll second this.

I should have noted, I guess, that while I haven't done the upgrade yet, my expectation/plan is that I will be doing an in-place upgrade of the config. I have too much stuff and there's just no way I won't break something if I started from scratch.

-- Scott



More information about the users mailing list