Yet another Idp error after SP upgrade

[Cantor, Scott]

On 8/12/13 1:11 PM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:

>Well, I only pulled it (Shibboleth.sso/Metadata) from each box to compare
>them.

In isolation, that isn't consistent with the breakage you've experienced,
so something else is involved. Almost certainly the metadata being
consumed is improper somewhere, but for things to break like this, you
have to have changed keys or entityIDs or some sort of custom behavior
that was in place for an IdP. It can't be operationally behaving the same,
obviously.

My other point was that in the event that Ping has a bug, it's not of any
immediate consequence and isn't anything somebody should have seen anyway
just because of the upgrade. For that to happen, the actual metadata
consumed has to change and it should never change because of an upgrade
alone without it being pulled directly with no intervening process.

-- Scott