Errors after Relying Party Service Reload
Tom Poage
tfpoage at ucdavis.edu
Mon Apr 2 22:04:20 BST 2012
On 04/02/2012 01:49 PM, Christopher Bongaarts wrote:
> So we don't have to update relying-party often. The usual case is to
> turn off encryption for SPs that don't support it.
And to minimize having to touch relying-party.xml, I think that can be
done with a (local) metadata group, as well:
> <rp:RelyingParty id="BadBadSPMDGroup" provider=...>
> <rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile" encryptAssertions="never"/>
> </rp:RelyingParty>
> <md:EntitiesDescriptor Name="BadBadSPMDGroup">
> <md:EntityDescriptor entityID="https://wont.say.com/shibboleth">
> <md:SPSSODescriptor ...
Tom.
More information about the users
mailing list