Shibboleth Developers

[Chad La Joie <>]

The IdP doesn't have its caching turned on right now, once that is
enabled those plugins that can cache won't do a second lookup.  However
you'll still see it hit the resolver, run the attribute definitions at
least and run the AFP as there is no way to cache the results of that
process.

Jim Fox wrote:
> I do a login to a shib2 idp from a shib2 sp using saml1 (authn,
> followed by authz request from the shibd).  The IdP is
> doing a full attribute lookup at the authn step and
> another at the authz query.
>
> Jim

--
SWITCH
Serving Swiss Universities
--------------------------
Chad La Joie, Software Engineer, Security
Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland
phone +41 44 268 15 75, fax +41 44 268 15 68
,
 http://www.switch.ch