storedID and IDP entityID changes

[Cantor, Scott]

On 2/25/14, 9:18 AM, "Rod Widdowson" <rdw at steadingsoftware.com> wrote:

>> Necessarily the assertions Issuer wouldn't match
>> the NameQualifier value then. Not sure if this will break stuff.
>
>AFAIR the Prinicipal Connectors will reject the NameID/NameIdentifier if
>it
>doesn't match what they are expecting.

Likely, but as I said, the SP also will now, which is a bigger deal here.

>At least notionally (I am not 100% up on the very grubby details of
>RelyingParty.xml) you can configure an IdP (lump of java code sitting
>inside
>a container) to have multiple entityIDs - and as such, I guess, act as
>multiple SAML IdPs.  Certainly the data structures deep inside the IdP
>understand the concept of multiple IdP EntityIDs.

Yeah, that would be a reason.

-- Scott