'relying party' error

[Cantor, Scott]

On 8/26/14, 3:14 PM, "David Bantz" <dabantz at alaska.edu> wrote:

>Apache, in addition to or instead of SP¹s shibboleth2.xml for which I
>gave them
>exact snippet to consume my IdP metadata?

Depends on the use case.

>Further communication from vendor indicates they have the following
>Apache config snippet:
><Location
> />
>ShibRequestSetting
> applicationId urn:mace:incommon:alaska.edu
></Location>
>Isn¹t that supposed to be the name of the vendor¹s service instead of my
>IdP?
>(and in any case bad syntax isn¹t it? - how could that possibly work?)

The setting for controlling the entityID content setting is not
surprisingly called entityID. ApplicationIds are anything you want them to
be, they just have to match the ApplicationOverride settings used. Setting
an applicationId to the name of an IdP is not really very sensible because
it's a really bad idea to use an override for every individual IdP. That's
not how the SP is meant to be used.

-- Scott