Backchannel failing after upgrade

[Cantor, Scott]

> I didn't see anything "extra" to do in the release notes that had to be done
> after the upgrade install. I've also looked at the document describing the
> jetty 9.3 config, and I'm not seeing anything out of place there either.

I doubt it has anything to do with the IdP per se, it's probably the fact that the TLS configuration was modernized.

You didn't indicate what the SP version is or the OpenSSL version, but a suitably old one doesn't connect to modern servers at the command line without other options due to SSLv3 being off and older ciphers disabled. The SP generally uses the right settings and should work regardless, but without any error to even respond to I have no further speculation. If it's really old and broken, then anything is possible.

Most shouldn't need the back channel at all, so an obvious question is what you're using it for.

-- Scott