AttributeScopeMatchesShibMDScope

Liam Hoekenga liamr at umich.edu
Tue Sep 13 20:21:48 BST 2011


> You can't have duplicates.

oK.  Forget I event mentioned InCommon.

If I configure the test sp to retrieve my test IdP's metadata  
directly, scoping works.

     https://shib-idp-test.www.umich.edu/idp/profile/Metadata/SAML

If I configure the test sp to use my local federation metadata,  
scoping is broken.

     http://www-personal.umich.edu/~liamr/UMich-metadata.xml

Something in my federation's metadata has to be off, and I can't  
figure out what it is.  I've looked at the EntitiesDescriptor tag for  
both InCommon and the UK federation.  Mine looks ok.  I'm stumped.

Liam


More information about the users mailing list