Shibboleth without Back Channel?

[Dan Malone]

We are in the process of upgrading to IDPv3, and we looking at making our new environment a bit easier by discontinuing our back-channel support.
I know of only one SP we are using that still uses the back-channel and we are working with them to change.

What is the best way to detect past back-channel use?
We have a years worth of logs, but, unfortunately, tomcat was not configured to log the port number.
I greped  idp-audit.log for "SOAP", removing ECP/MicrosoftOnline.
Is that good enough?

Second question, that maybe should be the first, but I didn't want my first question to get lost...
Is discontinuing the back-channel the right direction?

Thanks,
Dan
-- 
Dan Malone
Lead Identity Management Architect
Information Technology Services
California Polytechnic State University
San Luis Obispo, California

Direct 805-756-6326
dmalone at calpoly.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160321/b2828340/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3707 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/users/attachments/20160321/b2828340/attachment.p7s>