<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Thanks Nate, Kevin<div><br></div><div>Scott could you elaborate more on how to get rid of the warnings? What do you mean by "settings that can be tightened" ?</div><div><br></div><div>Can you point me to a wiki page if any?</div><div><br></div><div>Thanks</div><div>Jayashree</div><div><br></div><div><br></div><div><br><div><div id="SkyDrivePlaceholder"></div>> From: cantor.2@osu.edu<br>> To: users@shibboleth.net<br>> Subject: Re: Adding SAML2 ACS points does not seem to map attributes from SAML2 IDP<br>> Date: Mon, 8 Oct 2012 18:26:09 +0000<br>> <br>> On 10/8/12 1:54 PM, "Jayashree Ravi" <jravi123@hotmail.com> wrote:<br>> <br>> >Thanks Scott, We fixed the attribute-map and then we started getting the<br>> >values. However our operations team has the following to say about SSL:<br>> > <br>> >"As a standard for all encrypted web connections SSL certificates are<br>> >terminated at the F5 load balancer, which make cert management easier for<br>> >large environments. Please check with Shibboleth developers/support if<br>> >its possible to patch shibboleth to allow for such a setup to work, this<br>> >will allow for us to continue to terminate certs on the F5, or is this<br>> >not an option."<br>> <br>> The others answered, but I will reiterate: that has *nothing* to do with<br>> those warnings. They mean you have settings that can be tightened and that<br>> has nothing to do with whether you terminate SSL at the load balancer or<br>> not.<br>> <br>> The determinant is what the client sees, that's all.<br>> <br>> -- Scott<br>> <br>> <br>> --<br>> To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br></div></div> </div></body>
</html>