Shibboleth Developers

["Scott Cantor" <>]

> Is the value of the shire parameter always the same for a given SP
> 
> shire=https://sp.com/shibboleth/SSO
> 
> or does it depend on the profile used
> 
> shire=https://sp.com/shibboleth/SSO/POST
> shire=https://sp.com/shibboleth/SSO/Artifact

It depends entirely on what the SP sends. It's equivalent to the
AssertionConsumerServiceURL in SAMLv2.

> Since these URIs are encoded in metadata, is the shire parameter
> really necessary?  Isn't the providerId parameter enough?

Much of Shibboleth predates all of the metadata work. It's still not
sufficient, which is why SAMLv2 includes multiple means of communicating the
value in an AuthnRequest.

-- Scott