<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Brad,<div><br></div><div>That's an entirely reasonable decision, and one many deployers have made. At the end of the day, it comes down to the SP's you want to talk to, and fewer of those are requiring SAML 1.x. A couple more are requiring artifact for reasons we don't understand, but if you're not speaking to any of them, then no matter.</div><div><br></div><div>You'll want to be sure that the metadata you publish doesn't advertise support for protocols that you don't, well, support.</div><div><br></div><div>It's easy enough to retrofit 8443 support onto an existing IdP anyway. If you don't need it now, I wouldn't fret about it for now.</div><div><br></div><div>Take care,</div><div>Nate.</div><div><br><div><div>On Sep 7, 2012, at 17:26 , Brad Hannah wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><span class="Apple-style-span" style="font-family: Calibri, sans-serif; font-size: 14px; "><div>I am deploying a new IDP and would like to only enable the required protocols. I am not clustering on my application server (Tomcat) and as such would prefer not to use Artifact resolution. As I understand it, if I don't use Artifact then I don't need to host on port 8443. Is this correct? </div><div><br></div><div>Is it unreasonable to disable this? Is it unreasonable to disable SAML1x as well? I understand I may have a future service that only supports SAML1x, but hypothetically if I wanted to, would I only have to edit my idp-metadata.xml and remove any mentions of artifacts and SAML1?</div><div><br></div><div>Has anyone else done this? </div><div><br></div><div>Brad</div></span></span></blockquote></div><br></div></body></html>