Metadata question for Embedded Discovery and SP authentication of IdP

Tom Scavo trscavo at gmail.com
Wed Aug 3 13:40:18 BST 2011


On Tue, Aug 2, 2011 at 6:48 PM, Jason Bau <jasonbau at gmail.com> wrote:
>
> The Stanford Metadata is here:
>
> https://idp.stanford.edu/metadata.xml

AFAICT, the above metadata is functionally equivalent to the metadata
in the InCommon aggregate except that the latter contains an extra
SingleSignOnService endpoint. Normally, that wouldn't be a problem,
but that endpoint is a duplicate of an existing endpoint:

<SingleSignOnService
    Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest"
    Location="https://idp.stanford.edu/shibboleth-idp/SSO"/>
<SingleSignOnService
    Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest"
    Location="https://idp.stanford.edu/idp/profile/Shibboleth/SSO"/>

This is a question for Scott: What does the software do when it
encounters two non-indexed endpoints with identical Binding
attributes?

Tom


More information about the users mailing list