Multiple Certificate Scenario

[Kristen Judd]

Hello All,

I am new to the mailing list and wanted to ask about the multiple
certificate scenario outlined in the Shibboleth documentation here:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPMultipleCredentials#NativeSPMultipleCredentials-MultipleCertificateScenarios

I have two questions:

1.  Would this work federation-wide if the federation's entity ID is
specified for the RelyingParty?
It appears that in the example on the wiki-page for RelyingParty, it
could work at a Federation level:

   " <RelyingParty Name="SpecialFederation" keyName="special.example.org"/> "

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPRelyingParty

2. Can anyone explain why the documentation warns against using this
multiple certificate scenario and what downsides there are?

Thank you!

-- 
Kristen Judd
Associate Software Engineer
Turnitin