Metadata question for Embedded Discovery and SP authentication of IdP

[Cantor, Scott E.]

On 8/3/11 1:46 PM, "Tom Scavo" <trscavo at gmail.com> wrote:

>On Wed, Aug 3, 2011 at 9:04 AM, Chad La Joie <lajoie at itumi.biz> wrote:
>> Scott will correct me if I'm wrong, but pretty much all our software
>> will just use the first value of any multi-valued thing in metadata.
>
>Well, if that's true, then clearly that's not causing the problem that
>Jason noticed.

The problem was that the IdP was calling itself by a different name than
the metadata that was loaded. It's not mysterious.

If you have an IdP that's using, say, relying party overrides to assign
itself a different name, it's only going to work if those relying parties
don't consume metadata that advertises the IdP with a different name. You
can load both, of course, but that leads to problems with discovery and
other problems if the metadata diverges.

-- Scott