Test SP using a clone setup + migration and metadata queries

[Peter Schober]

* David Perry <DPerry at hull-college.ac.uk> [2013-09-12 13:11]:
> I've got http://siteroot/secure/ to then redirect to the IdP but
> it's now it's saying SAML 2 SSO profile is not configured for
> relying party https://heritage.hull-college.ac.uk/secure .

The IdP needs to have correct metadata about the SP you're
testing. Start by giving it a unique name (entityID) and adjusting the
attribute release filters in the IdP to match the production SP.  The
metadata the IdP has for the SP needs to match what your HTTP User
Agents accesses, it could even be localhost (or some other not
globally resolvable or reachable host) -- with SAML2 WebSSO the only
thing connecting to both the IdP and the SP is your user agent.
So whether any generated metadata only includes endpoints on an
internal host is immaterial for testing.
-peter