Best Practices

[Larissa Riedel]

Hi folks,

I'm going to document my current Shibboleth project and would like to
create a checklist for future integrations. The checklist should contain
the most important issues for configuration, common errors, best practises
and security recommendations. Currently the list consists of:
- communication via TLS 1.2
- signing of metadata
- encrypted assertions
- SP Metadata Generation Handler not for production environment
- if encryption of the assertions is disabled on the IdP, the consent will
not shown anymore (is this intentional?)

Since Shibboleth is still very new for me and I have little experience, I
would be very happy about your tips and recommendations.

Kind regards,
Larissa
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170722/7ce8cf17/attachment.html>