SP Logout

[Cantor, Scott]

On 9/12/12 10:14 AM, "Christopher Bongaarts" <cab at umn.edu> wrote:
>
>In our experience replacing our locally developed web SSO system with
>Shib across campus (so 200+ new SPs over the course of about a year and
>a half), the #1 deployer FAQ was "I have N virtual hosts and I'm getting
>'no endpoint' errors".

How are you managing the metadata? I designed our process here around
"registration of virtual hosts" with the initial one a special case of
also registering the certificate. So they just sort of know they have to
do this when they add or change hosts, and I trap that error so it's
recognizable.

>Somewhere buried in my to-do list is to more fully document the
>common-case practice of generating metadata for that use case, but if
>someone else already has such a beast, adding it to the Shib wiki would
>sure be handy. ;)

I honestly don't think it even works well using the generator. The metagen
script works much better for this, and I use that myself to generate the
metadata for all the SPs on campus. I don't have them do anything with
their metadata.

-- Scott