login failed for scitation.aip.org in IDP3

[Cantor, Scott]

On 3/13/16, 3:32 PM, "users on behalf of Hong Ye" <users-bounces at shibboleth.net on behalf of hy93 at cornell.edu> wrote:



>Thanks Scott. I saw back channel SAML2 attribureQuery to port 8443 from other SP in the access log.

You shouldn't see any SAML 2 queries. Seeing one means you have a broken attribute release policy for some SP.

> Since SAML1 attributeQuery uses the same port, I think secure channel negotiation works.

Unless you know that SP is using the same metadata, that wouldn't really be true.

> If SP sent it, I should see it in Apache access log. Right?

Yes.

-- Scott