Default the handlerURL property.

[shibboleth/cpp-sp.git] / configs / example-shibboleth2.xml

diff --git a/configs/example-shibboleth2.xml b/configs/example-shibboleth2.xml
index 33df42c..69f2821 100644 (file)
--- a/configs/example-shibboleth2.xml
+++ b/configs/example-shibboleth2.xml
@@ -98,9 +98,9 @@
         <!--\r
         Controls session lifetimes, address checks, cookie handling, and the protocol handlers.\r
         You MUST supply an effectively unique handlerURL value for each of your applications.\r
-        The value can be a relative path, a URL with no hostname (https:///path) or a full URL.\r
-        The system can compute a relative value based on the virtual host. Using handlerSSL="true"\r
-        will force the protocol to be https. You should also add a cookieProps setting of "; path=/; secure"\r
+        The value defaults to /Shibboleth.sso, and should be a relative path, with the SP computing\r
+        a relative value based on the virtual host. Using handlerSSL="true", the default, will force\r
+        the protocol to be https. You should also add a cookieProps setting of "; path=/; secure"\r
         in that case. Note that while we default checkAddress to "false", this has a negative\r
         impact on the security of the SP. Stealing cookies/sessions is much easier with this disabled.\r
         -->\r