Error when adding two <SSO /> elements to shibboleth2.xml

[Alex Stuart]

Folks,

I've got a perfectly functioning Shib SP 2.5.0, and as part of a UK 
federation support call I'm trying to add a second <SSO /> element. 
After it's added, shibd won't start and throws a "configuration is 
invalid, check console for specific problems" error.

shibd.log reports:

2012-12-11 17:38:16 ERROR XMLTooling.ParserPool : error on line 71, 
column 20, message: element 'SSO' is not allowed for content model 
'(SSO?,Logout?,NameIDMgmt?,(SessionInitiator|LogoutInitiator|AssertionConsumerService|ArtifactResolutionService|SingleLogoutService|ManageNameIDService|Handler))'

and I'd expect that the "SSO?" means "zero or one instances of SSO".

The Shib wiki page 
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPServiceSSO 
doesn't explicitly state that there can be only one SSO element, 
although it is implicit in the text (and appears to be explicit in the 
error message).

Can you confirm this? I'm happy to edit the wiki but would just like 
confirmation that I'm on the right track.

Thanks,
Alex

-- 
Alex Stuart
Federation Support Officer,
UK Access Management Federation
EDINA, University of Edinburgh


The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.