Shib IdP v5.1.3 - Upgrade issue with ArtifactResolutionService in metadata files

[Christopher Bongaarts]

On 9/25/2024 2:28 PM, Hall, Gerry via users wrote:
>
> I am not sure that this is the best solution, but to test, I have 
> removed the line from the metadata file. When I then restart the IdP, 
> the error disappears for that SP. However, I have over 340 metadata 
> files with the ‘ArtifactResolutionService’ line, and I would need to 
> remove that line from all 340 metadata files.
>
> My question is (1) is there a better way to resolve this error and 
> (2.) what are the implications of removing ArtifactResolutionService 
> in the SP SAML metadata file?  I have also read the doc here, 
> https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065334690/ArtifactResolutionService 
> .
>
The error is complaining that the line is in the wrong place; it is at 
the <EntityDescriptor> level when it should be inside the <SPSSODescriptor>.

My guess is most of your metadata files have them in the right place, 
unless someone had an erroneous copy up on the web somewhere and 
everyone used it.

Removing it is harmless if you don't need to resolve artifacts (most 
people don't).

-- 
%%  Christopher A. Bongaarts   %%cab at umn.edu          %%
%%  OIT - Identity Management  %%http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240925/cb70b875/attachment.htm>