Back-channel usage

Tom Scavo trscavo at gmail.com
Thu Mar 31 19:21:16 EDT 2016


On Thu, Mar 31, 2016 at 7:01 PM, Baron Fujimoto <baron at hawaii.edu> wrote:
> On Thu, Mar 31, 2016 at 09:44:07PM +0000, Cantor, Scott wrote:
>>>
>>> ... we are supporting:
>>>
>>> SAML1/SOAP/ArtifactResolution
>>> SAML2/SOAP/ArtifactResolution
>>> SAML1/SOAP/AttributeQuery
>>> SAML2/SOAP/AttributeQuery
>
> It seems that for the InCommon metadata we provide, we only advertise (if
> I'm getting this right) the SAML2/SOAP/AttributeQuery protocol.

I just checked your metadata...you are in luck! You are one step away
from being back-channel free :-)

If your IdP is configured to push attributes on the front channel
(which is typical), all you have to do is remove the SAML2
AttributeQuery endpoint in metadata and everything else will fall into
place. You will then be in excellent position to make the jump to IdP
V3.

Tom


More information about the users mailing list