<html><head></head><body><div>Hi Guys,</div><div><br></div><div>I wanted to share another success story. We managed to cut over to IDPv3 over the weekend maintenance window with success. </div><div><br></div><div>The main gotcha encountered during the actual cutover was needing to support SOAP endpoints as is documented on the Jetty9 page. The configuration didn't work for us out of the box because of port 8443 conflicting with what we had setup (as was hinted on the SecurityAndNetworking page), so I changed it to use 8009 and made an iptables rule redirect port 8443 to 8009. I also had to make a new pkcs12 keystore for the original idp.crt and idp.key files we had so that it would match what the metadata published.</div><div><br></div><div>In any case, with all that done, it was just a matter of getting attribute-filter right with various SPs.</div><div><br></div><div>I wanted to thank you all for the documentation and help on here, it's been an invaluable resource in getting to this stage.</div><div class="-x-evo-signature-wrapper"><span><pre>--
Brandon McKean
IT / Systems
Linux Administrator
(540)568-4235</pre></span></div></body></html>