Removing SAML1 and backchannel support from our IdP

Max Spicer max.spicer at york.ac.uk
Mon Sep 25 13:16:29 UTC 2023


I'm looking to remove SAML1 and the backchannel from our IdP. We've already
dropped advertisement of SAML1 and the endpoints that use the backchannel
from our metadata.

As far as I can see, we now need to do the following:
* Remove relevant config from tomcat, which fronts our IdP (yes, tomcat - I
know...)
* Remove the SAML1 and SAML2 AttributeQuery and ArtifactResolution profiles
from our relying party config
* Set the idp.artifact.enabled property to false? I'm not sure about this
one - it seems to default to true on new IdP installs but they do not
include backchannel support

Is there anything else to do?

Thanks,

Max Spicer
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230925/c3793881/attachment.htm>


More information about the users mailing list