Shibboleth without Back Channel?
Tom Scavo
trscavo at gmail.com
Mon Mar 21 16:37:06 EDT 2016
On Mon, Mar 21, 2016 at 1:16 PM, Dan Malone <dmalone at calpoly.edu> wrote:
>
> Is discontinuing the back-channel the right direction?
For an existing IdP, only you can answer that question, but keep in
mind that what your software supports and what you advertise in
metadata are two different things. The metadata you share out of band
with SPs that won't join the federation may be very different than the
metadata you publish to the world.
For new IdPs, the message is more clear: advertise support for SAML2
on the front channel only. You can always add other protocols later
but chances are you never have to do that.
Tom
More information about the users
mailing list