Ports need to be open for Setting up IdP

[Peter Schober]

* Rod Widdowson <rdw at steadingsoftware.com> [2017-06-12 17:35]:
> > No port 80 and no redirect -- noone should be typing in the
> > (incorrect) URL to your IDP, ever, so no need to redirect them
> > elsewhere either.
> > -peter
> 
> Actually thinking about this some more, you may want to add 80 - but
> best to leave it locked down to localhost and anywhere else
> where you may manage the IdP.  The management interface can work
> that way.

That's how I document things myself in our IDP instructions
(for Tomcat: <Connector address="127.0.0.1" port="80"/>)
but the question was about ports to open to a Shib IDP.
And you don't want to and should not open port 80 to the outside
world, which is the only meaningful interpretation of that question.
-peter