default entityID

Tom Scavo trscavo at gmail.com
Thu Feb 16 10:26:29 EST 2017


On Thu, Feb 16, 2017 at 2:49 AM, Rod Widdowson <rdw at steadingsoftware.com> wrote:
> Can you put in an RFE?  I'll be reopening that can or worms sometime next week.

Thank you. See: https://issues.shibboleth.net/jira/browse/IDP-1123

> I have a vague memory that DOMAIN doesn't work for windows but I'll check.  I might be mis-remembering because of the way it
> resolved names.
>
>> -----Original Message-----
>> From: dev [mailto:dev-bounces at shibboleth.net] On Behalf Of Tom Scavo
>> Sent: 16 February 2017 02:50
>> To: Shibboleth Developers
>> Subject: default entityID
>>
>> I found this line in build.xml:
>>
>> <input message="SAML EntityID:" addproperty="entityid"
>> defaultvalue="https://${idp.host.name}/idp/shibboleth" />
>>
>> That one line has cost countless numbers of deployers (and me) great
>> misunderstanding and pain. That line should simply be:
>>
>> <input message="SAML EntityID:" addproperty="entityid"
>> defaultvalue="https://${DOMAIN}/idp" />
>>
>> That is a much better entityID since it only depends on the domain,
>> which rarely changes. Everything else is subject to change, but as you
>> know, an entityID should NEVER change.
>>
>> Tom
>> --
>> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net
>
> --
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net


More information about the dev mailing list