Removing SAML1 and backchannel support from our IdP

Cantor, Scott cantor.2 at osu.edu
Tue Sep 26 16:23:57 UTC 2023


> As we don't advertise support for the ArtifactResolutionService does that
> mean we should also set idp.artifact.enabled = false?

Yes, because if you don't and an SP requests that protocol binding, your IdP will respond on the assumption the SP will be able to make its callback and your metadata will prevent that.

I was simply saying that tearing down an extra port/connector has nothing to do with whether you support SOAP-based profiles. Nobody needs an extra port anymore, regardless.

-- Scott




More information about the users mailing list