default entityID

Tom Scavo trscavo at gmail.com
Wed Feb 15 21:49:34 EST 2017


I found this line in build.xml:

<input message="SAML EntityID:" addproperty="entityid"
defaultvalue="https://${idp.host.name}/idp/shibboleth" />

That one line has cost countless numbers of deployers (and me) great
misunderstanding and pain. That line should simply be:

<input message="SAML EntityID:" addproperty="entityid"
defaultvalue="https://${DOMAIN}/idp" />

That is a much better entityID since it only depends on the domain,
which rarely changes. Everything else is subject to change, but as you
know, an entityID should NEVER change.

Tom


More information about the dev mailing list