NativeSPNotify

[Cantor, Scott]

On 6/15/17, 3:53 PM, "users on behalf of Drew Zebrowski" <users-bounces at shibboleth.net on behalf of Andrew.Zebrowski at jefferson.edu> wrote:

> I came across the write-up on NativeSPNotify (https://wiki.shibboleth.net/confluence/x/94BC) on the shibboleth 2 Wiki. This is
> something I would be interested in using if it’s still a supported feature and available IDP 3. Is this still something that can be
> configured in the lastest IDP release and do you have any updated details on how to set something like this up?
>
> My interest is in: the termination of a user's SAML <NameID> value (a deprovisioning event).

As Brent partly said, while the SP supports a notification trick for simulating some support for receiving NameID management protocol messages from an IdP, Shibboleth IdPs don't support them, don't have the "state awareness" of the IDM system behind them to send them, and as far as I know there are really no IdPs in the world that ever have supported it in any real way.

If there were demand for this, certainly the IdP could be made to support it in some triggered way. Perhaps that's something to take up with TIER given the assumption of potentially deeper ties between components.

-- Scott