Data in SP's Metadata
Peter Schober
peter.schober at univie.ac.at
Mon Jan 14 07:21:06 EST 2013
* Francisco Jose Fernandez Rivera <xisco.fernandez at ibsalut.es> [2013-01-14 12:47]:
> I have configured a test environment with an idp and several
> SPs. Everything is working fine. Now I want one of those SPs to
> point to another idp, but now my problem is that, after updating
> shibboleth2.xml to point to the new idp, when I query
> host/Shibboleth.sso/Metadata it stills returns me RequestInitiator
> pointing to the old login page:
1. The metadata for your SP should be the same, irrelevant of which
IdP you want to use. That also means you direct user agents to
specific SPs by other means.
2. You should not use /Shibboleth.sso/Metadata except to generate an
example from which to work. The same (and more) can be done with the
included metagen.sh script. See the first and third paragraph at:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPHandler#NativeSPHandler-MetadataGenerationHandler
3. The Location attributes of the init:RequestInitiator and
idpdisc:DiscoveryResponse elements should point to the SP, not the
IdP. If your SP points to "old_idp" then your SP config is wrong.
> I have been searching the whole filesystem and I can't find where is
> the file which the SP read to declare that Extension. Could anyone
> throw a little of light on this question?
There is no file for that. You'd need to look at the source where it
comes from but the assumption is that you don't need to know (or
change) that.
-peter
More information about the users
mailing list