Internation dateline issue

[Cantor, Scott]

On 1/22/13 8:00 PM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:

>Now it looks like a cert issue...

Are you actually signing requests for some reason?

>We joined the AAF and as part of that process, the AAF required that we
>create a new cert that used our entityID instead of our base domain.

Sigh.

>  So, I created a new one:

That isn't going to matter. It's not going to choose it for signing unless
you create a relying party rule to make it choose that. Otherwise it's
going to use the first one it finds for everything.

But my primary advice would be to stop signing your requests unless you
have a reason for doing so.

-- Scott