Remote IdP not responding?

Cantor, Scott cantor.2 at osu.edu
Mon Jul 1 13:41:28 EDT 2013


> 1) They sent us the proper metadata file by encrypted mail. If we are
> using SOLELY their metadata file, do we even need to have a
> MetadataProvider URI specified?

You *can't* have one specified in that event.

> If so, where will Shibd want that file to be located? Our guess is
> /etc/shibboleth but I don't see any documentation for that location.

It's etc/shibboleth (look at all the other unqualified files in the configuration).

> Does the actual fine name matter, or do we have control over that?

That's up to you.

> However, the Metadata file shows this for a SSO Redirect:

That has nothing to do with the entityID, that's a location for an endpoint.

> Should the SSO entityID then be this:

Absolutely not.

> For this to all work, should the local MetadataProvider stanza come
> before any other of the other stanzas?

Assuming you mean the XML elements in the file, most of the elements inside <ApplicationDefaults> can be in any order now.

-- Scott





More information about the users mailing list