Back-channel usage

[Cantor, Scott]

On 3/31/16, 7:21 PM, "users on behalf of Tom Scavo" <users-bounces at shibboleth.net on behalf of trscavo at gmail.com> wrote:


>
>If your IdP is configured to push attributes on the front channel
>(which is typical), all you have to do is remove the SAML2
>AttributeQuery endpoint in metadata and everything else will fall into
>place. You will then be in excellent position to make the jump to IdP
>V3.

At which point, you'll want to do a couple of useful things:

- set the idp.artifact.enabled property to false
- switch the idp.transientId.generator property to shibboleth.StoredTransientIdGenerator

The latter will generate shorter transient IDs and not waste cycles on producing the encrypted ones for no reason.

-- Scott