<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>The IDP v3 creds file contain two .crt files, one for encryption and one for signing. The IDP v2 credentials file contained a single idp.crt file.</div>
<div><br>
</div>
<div>The IDP v2 metadata contains two <ds:X509Certificate> elements, which have identical values for Idp v2, since there’s one x509 cert. For IDP v3 metadata, do we use both idp-encryption.crt and idp-signing.crt? If so, in any particular order? Below is
what my file looks like:</div>
<div>------------------</div>
<div>
<div><?xml version="1.0" encoding="UTF-8"?></div>
<div><EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" entityID="https://shibber.ncsa.illinois.edu/idp/shibboleth"></div>
<div><br>
</div>
<div> <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol"></div>
<div><br>
</div>
<div> <Extensions></div>
<div> <shibmd:Scope regexp="false">illinois.edu</shibmd:Scope></div>
<div> </Extensions></div>
<div><br>
</div>
<div> <KeyDescriptor></div>
<div> <ds:KeyInfo></div>
<div> <ds:X509Data></div>
<div> <ds:X509Certificate></div>
<div>MIIDUDCCAjigAwIBAgIVALUWhETrTWbylD+md9DCAyq15i7zMA0GCSqGSIb3DQEB</div>
<div>CwUAMCQxIjAgBgNVBAMTGXNoaWJiZXIubmNzYS5pbGxpbm9pcy5lZHUwHhcNMTQx</div>
<div>MDE3MTUzMjUxWhcNMzQxMDE3MTUzMjUxWjAkMSIwIAYDVQQDExlzaGliYmVyLm5j</div>
<div>c2EuaWxsaW5vaXMuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA</div>
<div>nxhq74TqaGmHLdTips82d0oVA9jiPwIpYtRRI62Su/aHqFE0uxp9L4QhgXasBUK9</div>
<div>0B8dpFgccwcTtWjr9FUr3BUynAhjgZ9Or5mhWcqI2k1LkOiYOZy86VtlYFZXXS1g</div>
<div>jAWV1OTI293Cv1+laQBVZOTfz1Z/GrBiiQsjU04akBeBbrbnus3MME8jShtg85UD</div>
<div>K25eLBevHe8QpTCVLiEyYRYeq1wPbmmIVQDJb8il49h5ZWnByt0wJ11LFXGzqfLR</div>
<div>taG5FvHgdiv1VsWuZa3vISly2nJ+6RBc0fcAyx6+BIkfBGxnWjU86LzH0fiCla+V</div>
<div>zDgDdH0FCvy2ggezbl2/awIDAQABo3kwdzBWBgNVHREETzBNghlzaGliYmVyLm5j</div>
<div>c2EuaWxsaW5vaXMuZWR1hjBodHRwczovL3NoaWJiZXIubmNzYS5pbGxpbm9pcy5l</div>
<div>ZHUvaWRwL3NoaWJib2xldGgwHQYDVR0OBBYEFPxPd5NL6gvnjmjBCQj7iKX9IvsR</div>
<div>MA0GCSqGSIb3DQEBCwUAA4IBAQBV7qrjNpzVyjsQabQdE09LYo2PkX5rP2j3d4Yq</div>
<div>oFb3IMSxtkFc7T9cHfv2KolI4H5qyb+MPUyo1JhBdlipcoK2ommL4pC7SXYiUXvc</div>
<div>hmtKR+jpdphJWiZboZhI+X5e+TXJ11uPu7LLpXJ84/LlfFLQQU0Ok3/nHbEdhZO6</div>
<div>w75B+tgVlrmcuIo3YQNpJRIDSqVchzVDNOtr4mg3uQXkjN4hhOrYAsb4Fq2ox+aH</div>
<div>vhEuIIf3MCmo9pRc9nSmvFRQGVEbtCuk6Cj+6SQQ4/x1XqDfN1cB6vo/3B2WpWpr</div>
<div>Q2nph8zKq/bot9DNUbGDl2NxoEzKR3Z/1rQRUrCeTBVCXbbt</div>
<div><br>
</div>
<div> </ds:X509Certificate></div>
<div> </ds:X509Data></div>
<div> </ds:KeyInfo></div>
<div> </KeyDescriptor></div>
<div> </div>
<div> <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shibber.ncsa.illinois.edu:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/></div>
<div><br>
</div>
<div> <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibber.ncsa.illinois.edu:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/></div>
<div> </div>
<div> <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shibber.ncsa.illinois.edu/idp/profile/SAML2/Redirect/SLO" /></div>
<div> </div>
<div> <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibber.ncsa.illinois.edu/idp/profile/SAML2/POST/SLO" /></div>
<div> </div>
<div> <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibber.ncsa.illinois.edu:8443/idp/profile/SAML2/SOAP/SLO" /></div>
<div> </div>
<div> <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat></div>
<div> <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat></div>
<div><br>
</div>
<div> <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shibber.ncsa.illinois.edu/idp/profile/Shibboleth/SSO"/></div>
<div> </div>
<div> <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibber.ncsa.illinois.edu/idp/profile/SAML2/POST/SSO"/></div>
<div><br>
</div>
<div> <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shibber.ncsa.illinois.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/></div>
<div> </div>
<div> <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shibber.ncsa.illinois.edu/idp/profile/SAML2/Redirect/SSO"/></div>
<div> </IDPSSODescriptor></div>
<div><br>
</div>
<div> <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol"></div>
<div><br>
</div>
<div> <Extensions></div>
<div> <shibmd:Scope regexp="false">illinois.edu</shibmd:Scope></div>
<div> </Extensions></div>
<div><br>
</div>
<div> <KeyDescriptor></div>
<div> <ds:KeyInfo></div>
<div> <ds:X509Data></div>
<div> <ds:X509Certificate></div>
<div>MIIDUDCCAjigAwIBAgIVAIt2VF1d8m1AgejePPQjnPmy6ThNMA0GCSqGSIb3DQEB</div>
<div>CwUAMCQxIjAgBgNVBAMTGXNoaWJiZXIubmNzYS5pbGxpbm9pcy5lZHUwHhcNMTQx</div>
<div>MDE3MTUzMjQ5WhcNMzQxMDE3MTUzMjQ5WjAkMSIwIAYDVQQDExlzaGliYmVyLm5j</div>
<div>c2EuaWxsaW5vaXMuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA</div>
<div>334UxquMLhTotWPMm4xLMWrDTnFDe51cKXXlGVRaacwyMRbPB0w7Lhn3+6OGBdrx</div>
<div>i/aQFA9iSwX0uwfUfijpRcVP1b35dw64djLRF98kecsH9H2UMI81b/crMHpFD+HY</div>
<div>7i2kjhL/Ya/zMBP0dHxnGFfChYyrF8O08DNvAz3nRKZGI/lHitCBf5PUrJzXaDqB</div>
<div>Fz7PnJ0gJOmV9lZkTDaHHrdqCDlgOtLY2f+YTIYZzqc2oO+SQUiYcjMeLZ/Gf8C/</div>
<div>5CB0bFcBQxPKxWvg2dDTOW7QjRr0/WyNu70OUMRBekdbGVLrtSpx0l3UcU8d+YUl</div>
<div>YLiWGd3Wbpe12bDRUl+74QIDAQABo3kwdzBWBgNVHREETzBNghlzaGliYmVyLm5j</div>
<div>c2EuaWxsaW5vaXMuZWR1hjBodHRwczovL3NoaWJiZXIubmNzYS5pbGxpbm9pcy5l</div>
<div>ZHUvaWRwL3NoaWJib2xldGgwHQYDVR0OBBYEFEKJ8SmuZL6porHCwkJ8CCfxgJ60</div>
<div>MA0GCSqGSIb3DQEBCwUAA4IBAQCNvmsf2B3fvyaO0bnUy+ibUQsquHGjlQMlhPPY</div>
<div>OkJMSpmDiILkhAIZgN7RMVQy8Dh9gRil8gpmyuy8DInjiBqSN5mv0V5ZH5KssKwf</div>
<div>/CcGZF7SO828A6XMJOTeDVY721G0t8m4D1Q5+DqWGToiQ5PLRYmCghoKNp4osnA1</div>
<div>BlS9bvggEuUHRfglhXABMjrS0oHNh1hGAqZXC3KZcybw1q2AT2FYD9zG/V/2XXgK</div>
<div>swRj7tYVqTcvyvQZNDFaDaXOcyFPCcyGfrFd3DIFZkkWjMRu0zrOOev+WcR9MqOy</div>
<div>FfcE2n1jVmOJORKBixl5rJd4q8tcNt1lEVpvaEqZsSVexJIw</div>
<div><br>
</div>
<div> </ds:X509Certificate></div>
<div> </ds:X509Data></div>
<div> </ds:KeyInfo></div>
<div> </KeyDescriptor></div>
<div><br>
</div>
<div> <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shibber.ncsa.illinois.edu:8443/idp/profile/SAML1/SOAP/AttributeQuery"/></div>
<div> </div>
<div> <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibber.ncsa.illinois.edu:8443/idp/profile/SAML2/SOAP/AttributeQuery"/></div>
<div> </div>
<div> <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat></div>
<div> <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat></div>
<div> </div>
<div> </AttributeAuthorityDescriptor></div>
<div> </div>
<div></EntityDescriptor></div>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>--------------------</div>
<div>Thanks,</div>
<div>Wendy</div>
</body>
</html>