Errors after Relying Party Service Reload

Tom Poage tfpoage at ucdavis.edu
Mon Apr 2 22:04:20 BST 2012


On 04/02/2012 01:49 PM, Christopher Bongaarts wrote:
> So we don't have to update relying-party often.  The usual case is to 
> turn off encryption for SPs that don't support it.

And to minimize having to touch relying-party.xml, I think that can be
done with a (local) metadata group, as well:

>     <rp:RelyingParty id="BadBadSPMDGroup" provider=...>
>       <rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile" encryptAssertions="never"/>
>     </rp:RelyingParty>

> <md:EntitiesDescriptor Name="BadBadSPMDGroup">
>   <md:EntityDescriptor entityID="https://wont.say.com/shibboleth">
>     <md:SPSSODescriptor ...

Tom.


More information about the users mailing list