Cert error

[Cantor, Scott]

On 8/1/13 2:58 PM, "Stein, Eric" <steine at locustec.com> wrote:

>The root cause was this:
>  shibboleth2.xml was loading both the client's test metadata and the
>client's production metadata. Both metadata files had the same entityId.
>It appears in that situation shibboleth just hits the first one that's
>listed, which was the test metadata in our case. That caused accesses
>from their test IdP to work but their live IdP to fail.
>
>The moral of the story appears to be "make sure all your metadata files
>have different entityIds".

Or make sure the metadata's the same, but yes. There is no way to merge
metadata in the general case.

-- Scott