-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Good morning all,
Last week we took the plunge and moved our IdP over to Shib 2.x (from
v1). This went very well :-)
Since then, I've noticed that accessing some resources which used to
actively use the eduPersonTargetedId start forgetting who users are...
this appears to be a symptom of having an "old" format (opaqueid@scope)
and a "new" format (idp!sp!opaqueid)... even though the opaqueids are
the same, some services seem to have latched onto the "new" format only
even when the old one is still available.
Such services include JISCMail and the JANET Certificate Service... both
of which I've had to relink myself.
Is this just something that happens when a SAML2 service talks only
SAML2 and we just have to deal with it? Have I missed a useful document
that will have warned me about this? :)
Thanks :)
- --
Matthew Slowe <[log in to unmask]> | Tel: +44 (0)1227 824265
Development Team, Information Services | Fax: +44 (0)1227 824078
University of Kent, Canterbury, Kent | Web: http://www.kent.ac.uk/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAkxEGUQACgkQ/V1qDCaTXge26ACg0G2inxaPEk2lXWLTMngN82O/
g44An0jObABv4shzI/H00NLqXSMRKf+g
=6Mks
-----END PGP SIGNATURE-----
|