Metadata question for Embedded Discovery and SP authentication of IdP

[Jason Bau]

On Wed, Aug 3, 2011 at 12:41 PM, Cantor, Scott E. <cantor.2 at osu.edu> wrote:
> On 8/3/11 1:46 PM, "Tom Scavo" <trscavo at gmail.com> wrote:
>
>>On Wed, Aug 3, 2011 at 9:04 AM, Chad La Joie <lajoie at itumi.biz> wrote:
>>> Scott will correct me if I'm wrong, but pretty much all our software
>>> will just use the first value of any multi-valued thing in metadata.
>>
>>Well, if that's true, then clearly that's not causing the problem that
>>Jason noticed.
>
> The problem was that the IdP was calling itself by a different name than
> the metadata that was loaded. It's not mysterious.
>
> If you have an IdP that's using, say, relying party overrides to assign
> itself a different name, it's only going to work if those relying parties
> don't consume metadata that advertises the IdP with a different name. You
> can load both, of course, but that leads to problems with discovery and
> other problems if the metadata diverges.
>

Yes. I can confirm now that was the cause.  The IdP called itself by
different Issuer names in Responses to
my SP versus, for example, the InCommon Discovery Test SP.

Anyways, I've got a work around.  Thanks to all of you for your great help.

Jason


> -- Scott
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>