Remote IdP not responding?
Cantor, Scott
cantor.2 at osu.edu
Mon Jul 1 13:41:28 EDT 2013
> 1) They sent us the proper metadata file by encrypted mail. If we are
> using SOLELY their metadata file, do we even need to have a
> MetadataProvider URI specified?
You *can't* have one specified in that event.
> If so, where will Shibd want that file to be located? Our guess is
> /etc/shibboleth but I don't see any documentation for that location.
It's etc/shibboleth (look at all the other unqualified files in the configuration).
> Does the actual fine name matter, or do we have control over that?
That's up to you.
> However, the Metadata file shows this for a SSO Redirect:
That has nothing to do with the entityID, that's a location for an endpoint.
> Should the SSO entityID then be this:
Absolutely not.
> For this to all work, should the local MetadataProvider stanza come
> before any other of the other stanzas?
Assuming you mean the XML elements in the file, most of the elements inside <ApplicationDefaults> can be in any order now.
-- Scott
More information about the users
mailing list