<html><head></head><body><blockquote type="cite"><div>Then I misunderstood you, I assumed what you were proposing was to add that.</div><div><br></div><div>Then you already understand...you have the metadata sitting there and yet you still have SAML 1 happening. So if you're suggesting that removing the SAML 1 metadata will fix anything, no. That's going to break any of those SPs that are actually relying on the metadata. Most of them are probably not, but I really couldn't say.</div></blockquote><div><br></div><div>Ok, good to know. I was afraid I didn't have SAML2 support at all. Whew.</div><div><br></div><div>Ah, so there isn't really a way to force use of SAML2 instead, it's all up to the SP in that sense?</div><div><br></div><blockquote type="cite"><div>Testshib is not an InCommon-driven service.</div></blockquote><div><br></div><div>Sorry for the confusion, I had meant I used testshib with altered metadata before to try and force SAML1 and SAML2 as applicable (And to test the metadata changes). My goal in that was to see how I might do similar changes with the InCommon metadata.</div><div><br></div><div>Brandon</div><div><br></div><div>On Wed, 2015-07-22 at 14:52 +0000, Cantor, Scott wrote:</div><blockquote type="cite"><pre>On 7/22/15, 10:48 AM, "users on behalf of McKean, Brandon Scott - mckeanbs" <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:mckeanbs@jmu.edu">mckeanbs@jmu.edu</a>> wrote:
<blockquote type="cite">
Hmm, perhaps I don't fully understand the implications of the metadata myself. What I previously emailed was the current metadata, with the SAML2 elements there.
</blockquote>
Then I misunderstood you, I assumed what you were proposing was to add that.
Then you already understand...you have the metadata sitting there and yet you still have SAML 1 happening. So if you're suggesting that removing the SAML 1 metadata will fix anything, no. That's going to break any of those SPs that are actually relying on the metadata. Most of them are probably not, but I really couldn't say.
<blockquote type="cite">
Maybe there's more to it that I'm not seeing? I thought having all the SAML2 lines that I posted before indicated SAML2 support was there. for our side. (And when I've used Testshib in testing it, it appears to be using SAML2, I could only make it use SAML1 when modifying the metadata to remove SAML2 bits.)
</blockquote>
Testshib is not an InCommon-driven service.
-- Scott
</pre></blockquote><div><br></div></body></html>